| CVE-2026-90997 |
A flaw was found in Keycloak
|
7.4
High
|
Sep 17, 2026 |
| CVE-2026-1609 |
A flaw was found in Keycloak
|
8.1
High
|
Jul 16, 2026 |
| CVE-2025-12150 |
A flaw was found in Keycloak’s WebAuthn registration component
|
3.1
Low
|
Feb 27, 2026 |
| CVE-2025-13467 |
A flaw was found in the Keycloak LDAP User Federation provider
|
5.5
Medium
|
Nov 25, 2025 |
| CVE-2025-11538 |
A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug ) insecurely defaults to…
|
6.8
Medium
|
Nov 13, 2025 |
| CVE-2025-12390 |
A flaw was found in Keycloak
|
6.0
Medium
|
Oct 28, 2025 |
| CVE-2025-10939 |
A flaw was found in Keycloak
|
3.7
Low
|
Oct 28, 2025 |
| CVE-2025-12110 |
A flaw was found in Keycloak
|
5.4
Medium
|
Oct 23, 2025 |
| CVE-2025-11429 |
A flaw was found in Keycloak
|
5.4
Medium
|
Oct 23, 2025 |
| CVE-2025-10044 |
A flaw was found in Keycloak
|
4.3
Medium
|
Sep 5, 2025 |
| CVE-2025-9162 |
A flaw was found in org.keycloak/keycloak-model-storage-service
|
4.9
Medium
|
Aug 21, 2025 |
| CVE-2025-8419 |
A vulnerability was found in Keycloak-services
|
5.3
Medium
|
Aug 6, 2025 |
| CVE-2022-4361 |
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in…
|
10.0
Critical
|
Jul 7, 2023 |
| CVE-2020-10686 |
A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user…
|
4.1
Medium
|
May 4, 2020 |
| CVE-2019-14820 |
It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in…
|
4.3
Medium
|
Jan 8, 2020 |