Keycloak vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
82 matching records
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.65%Mar 18, 2026
- High8.1A flaw was found in Keycloak.Check if you run itEPSS 0.44%Mar 18, 2026
- High7.7A flaw was found in Keycloak.Check if you run itEPSS 0.38%Mar 18, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.28%Mar 12, 2026
- Medium4.2A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level to perform sensitive actions intended only for hig…Check if you run itEPSS 0.26%Mar 11, 2026
- Low2.7A flaw was found in Keycloak.Check if you run itEPSS 0.35%Mar 11, 2026
- High8.8A flaw was found in org.keycloak.broker.saml.Check if you run itEPSS 0.55%Mar 5, 2026
- High8.1A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been…Check if you run itEPSS 0.38%Mar 5, 2026
- Low3.1A flaw was found in Keycloak’s WebAuthn registration component.Check if you run itEPSS 0.23%Feb 27, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.35%Feb 27, 2026
- Critical9.1Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component.Check if you run itEPSS 0.61%Feb 23, 2026
- Medium5.0A flaw was found in Keycloak.Check if you run itEPSS 0.17%Feb 10, 2026
- Low3.7A flaw was found in Keycloak.Check if you run itEPSS 0.49%Jan 15, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.40%Jan 8, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.72%Dec 23, 2025
- Medium6.0A flaw was found in Keycloak.Check if you run itEPSS 0.34%Dec 16, 2025
- Low2.7A flaw was found in Keycloak Admin REST (Representational State Transfer) API.Check if you run itEPSS 0.35%Dec 10, 2025
- Medium5.5A flaw was found in the Keycloak LDAP User Federation provider.Check if you run itEPSS 0.47%Nov 25, 2025
- Medium6.8A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug ) insecurely defaults to binding the Java Debug Wire Protocol (JDWP) port to all networkCheck if you run itEPSS 0.43%Nov 13, 2025
- Medium6.0A flaw was found in Keycloak.Check if you run itEPSS 0.14%Oct 28, 2025
- Low3.7A flaw was found in Keycloak.Check if you run itEPSS 0.41%Oct 28, 2025
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.30%Oct 23, 2025
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.24%Oct 23, 2025
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.31%Sep 5, 2025
- Medium4.9A flaw was found in org.keycloak/keycloak-model-storage-service.Check if you run itEPSS 0.54%Aug 21, 2025