Keycloak / update detail

26.8.2

Official Keycloak changelog summary with source attribution, release tags and upgrade verdicts.

Track this Keycloak release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Keycloak·Nov 5, 2026, 04:00 PMFixSecurity-relevantAI-assisted summary

Summary

Addresses a large set of critical security issues (CVE‑2026‑... series) covering XSS, DoS, token takeover, and protocol bypasses across authentication, OIDC, SAML, and admin APIs.
Upgrades the runtime to Quarkus 3.40.1.1.
Fixes numerous bugs such as incorrect session‑limit handling, FGAP permission regressions, import/export failures, and intermittent resource caching errors.

securitybugfixminorfeaturesource healthy

Official source Last checked Nov 11, 2026, 10:00 PM

Loading follow options…

keep exploring

Continue with Keycloak

Compare this release with the product timeline and keep the tools you use in one place.

official source

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Nov 11, 2026, 10:00 PM

digest settings

Already following Keycloak? Add related tools without starting a new digest.