Skip to content

Identity & Access Management · head-to-head

Red Hat Keycloak vs WSO2

On-prem IAM/IGA/PAM/MFA: directories, federation, privileged access, SSO. Counts are scoped to this segment and the selected published-date window. WSO2 carries 2.7× the disclosed CVE volume of Red Hat Keycloak. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Red Hat Keycloak versus WSO2. Each row gives the metric, Red Hat Keycloak’s count on the left and WSO2’s count on the right.
Red Hat KeycloakMetricWSO2
26Total CVEs71
1Critical10
12High10
10Medium44
3Low7
130Open in latest71
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Red Hat Keycloak

3.8% critical
Critical
13.8%
High
1246.2%
Medium
1038.5%
Low
311.5%

WSO2

14.1% critical
Critical
1014.1%
High
1014.1%
Medium
4462.0%
Low
79.9%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Red Hat Keycloak

Recent CVEs affecting Red Hat Keycloak
CVESeverityCVSSPublished
CVE-2026-16102(opens NVD record)High
8.1
Aug 5, 2026
CVE-2026-15573(opens NVD record)High
8.1
Aug 5, 2026
CVE-2026-16093(opens NVD record)Medium
5.4
Jul 17, 2026
CVE-2026-15945(opens NVD record)Medium
4.3
Jul 16, 2026
CVE-2026-28369(opens NVD record)High
8.7
Mar 27, 2026
CVE-2026-28368(opens NVD record)High
8.7
Mar 27, 2026

WSO2

Recent CVEs affecting WSO2
CVESeverityCVSSPublished
CVE-2026-5430(opens NVD record)Critical
10.0
Aug 6, 2026
CVE-2026-1728(opens NVD record)Critical
9.8
Aug 6, 2026
CVE-2026-0637(opens NVD record)Medium
4.4
Aug 6, 2026
CVE-2025-15039(opens NVD record)Critical
9.4
Aug 6, 2026
CVE-2025-14779(opens NVD record)Low
3.8
Aug 6, 2026
CVE-2025-13909(opens NVD record)Medium
4.3
Aug 6, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts