end-of-life.org

Keycloak 26.6 End of Life

Support dates, vulnerabilities published since end of life, and upgrade guidance — rebuilt from live data.

End of Life

Keycloak 26.6 reached end of life on 9 Jul 2026. It no longer receives security fixes.

31 days without security patches
0 Keycloak CVEs published since EOL
Recommended action: upgrade to Keycloak 26.7.

Support timeline

Official dates from the Keycloak release process.

MilestoneDateStatus
Initial release8 Apr 2026
End of life 9 Jul 2026 0.1 years ago
Latest release26.6.4 · 26 Jun 2026 final

Where to go from 26.6

Recommended target: Keycloak 26.7.

The newest actively supported branch is Keycloak 26.7 (latest release 26.7.1).

Frequently asked questions

Is Keycloak 26.6 still safe to use?

No. Keycloak 26.6 stopped receiving security fixes on 9 Jul 2026. Since then, 0 Keycloak vulnerabilities have been published and fixed in supported branches — Keycloak 26.6 received none of those fixes.

Can I still download Keycloak 26.6?

Yes — the final release (26.6.4) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.

What should I upgrade Keycloak 26.6 to?

Upgrade to Keycloak 26.7, the newest actively supported branch.

All Keycloak versions