Keycloak

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 15
    Known Exploited: 0
    1
    Critical Level Threats
    7
    High Level Threats
    6
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-109081

    Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint

    Last Modified: Nov 06, 2026
    Published: Nov 05, 2026

    CVE-2026-90997

    Keycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatch

    Last Modified: Sep 22, 2026
    Published: Sep 16, 2026

    CVE-2026-2603

    Keycloak: keycloak: unauthorized authentication via disabled saml identity provider

    Last Modified: Aug 18, 2026
    Published: Mar 05, 2026

    CVE-2026-3429

    Org.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest api

    Last Modified: Aug 18, 2026
    Published: Mar 02, 2026

    CVE-2026-3190

    Keycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection api

    Last Modified: Apr 15, 2026
    Published: Feb 25, 2026
    Items Per Page
    Keycloak Vulnerabilities & Security CVEs | CVE-DB