Keycloak vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
82 matching records
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.50%May 19, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.88%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.30%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 19, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 19, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.43%May 19, 2026
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.28%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.39%May 19, 2026
- Medium5.3Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data.Check if you run itEPSS 0.30%May 13, 2026
- Medium5.4When Keycloak is started with , the Account REST API is only partially disabled.Check if you run itEPSS 0.23%Apr 30, 2026
- Medium5.4The Keycloak authentication manager in did not generate or validate the OAuth 2.0 parameter on the login / login-callback flow, and did not use PKCE.Check if you run itEPSS 0.40%Apr 18, 2026
- Medium6.9A flaw was found in Keycloak, specifically in the organization selection login page.Check if you run itEPSS 0.36%Apr 14, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.25%Apr 6, 2026
- High8.1A flaw was found in Keycloak.Check if you run itEPSS 0.44%Apr 2, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.64%Apr 2, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.26%Apr 2, 2026
- High7.4A flaw was found in Keycloak.Check if you run itEPSS 0.43%Apr 2, 2026
- High7.3A flaw was found in Keycloak.Check if you run itEPSS 0.45%Apr 2, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.33%Mar 26, 2026
- High7.2A flaw was found in Keycloak.Check if you run itEPSS 0.48%Mar 26, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.35%Mar 26, 2026
- Low3.7A flaw was found in Keycloak.Check if you run itEPSS 0.42%Mar 23, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.26%Mar 23, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.24%Mar 18, 2026