Keycloak — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
February 23, 2026
Last Seen
August 3, 2026

Keycloak is a technology platform tracked by ThreatCluster, appearing in 4 threat clusters built from 8 intelligence report mentions.

Keycloak is a technology platform tracked across 4 threat clusters and 8 intelligence report mentions on ThreatCluster. First observed February 23, 2026; most recent activity August 3, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • CVE 2026 18570 — access.redhat.com · August 3, 2026
  • CVE-2026-18570 Detail — Nvd.Nist · August 3, 2026
  • Full Broker Takeover No Login Required Miggo Discovers Critical Rabbitmq Vulnerabilities Putting Application Data At Risk — www.miggo.io · July 15, 2026
  • RabbitMQ flaws expose OAuth secrets, risk complete takeover of the broker — Csoonline · July 13, 2026
  • Dsa 2025 435 Security Update For Dell Powerflex Rack Multiple Third Party Component Vulnerabilities — www.dell.com · May 23, 2026
  • Dsa 2025 434 Security Update For Dell Powerflex Appliance Multiple Third Party Component Vulnerabilities — www.dell.com · May 23, 2026
  • CVE-2026-23552 - Critical Vulnerability — Thehackerwire · February 24, 2026
  • CVE-2026-23552 — Cve · February 23, 2026

Related Entities

Data Breach Grafana Red Hat Trail Of Bits CVE-2020-22916 CVE-2020-36327 CVE-2021-28965 CVE-2021-3121 CVE-2021-41495 CVE-2022-27191 CVE-2022-30632 CVE-2022-40899

Frequently asked questions

What is Keycloak?

Keycloak is a technology platform tracked by ThreatCluster, appearing in 4 threat clusters built from 8 intelligence report mentions.

Is Keycloak still active?

The most recent intelligence report mentioning Keycloak on ThreatCluster is dated August 3, 2026. Activity was first observed February 23, 2026, giving a tracked span from then to August 3, 2026.

What is Keycloak associated with?

Across ThreatCluster reporting, Keycloak most frequently co-occurs with Data Breach, Grafana, Red Hat, Trail Of Bits, CVE-2020-22916, among 12 tracked related entities.

What are the latest developments involving Keycloak?

The most significant recent cluster is “Critical RabbitMQ Vulnerabilities Enable Broker Takeover via OAuth Secrets” (6 articles · Updated July 13, 2026). Keycloak appears across 4 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Keycloak?

Keycloak appears in 8 intelligence report mentions across 4 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown