KeyCloak

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium1low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-8419US	—	0.57% (47th)	—	26.3.3	2025-08-06	0 → 26.3.3
CVE-2025-9162US	—	0.52% (44th)	—	26.3.4	2025-08-21	0 → 26.3.4
CVE-2025-13467US	—	0.47% (41st)	—	26.4.6	2025-11-25	0 → 26.4.6
CVE-2025-11538US	—	0.43% (37th)	—	26.4.4	2025-11-13	0 → 26.4.4
CVE-2025-10939US	—	0.41% (35th)	—	26.4.4	2025-10-28	0 → 26.4.4
CVE-2025-10044US	—	0.31% (24th)	—	26.2.9	2025-09-05	0 → 26.2.9
CVE-2025-12110US	—	0.30% (23rd)	—	26.4.3	2025-10-23	0 → 26.4.3
CVE-2025-11429US	—	0.24% (14th)	—	26.4.1	2025-10-23	0 → 26.4.1
CVE-2025-12150US	low3.1	0.23% (14th)	—	26.4.4	2026-02-27	0 → 26.4.4
CVE-2025-12390US	—	0.14% (3rd)	—	26.0.0	2025-10-28	0 → 26.0.0

The flaw types (CWEs) most of these CVEs share.

CWE-613Insufficient Session Expiration2 CVEs
CWE-1327Binding to an Unrestricted IP Address1 CVEs
CWE-347Improper Verification of Cryptographic Signature1 CVEs
CWE-384Session Fixation1 CVEs
CWE-427Uncontrolled Search Path Element1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-526Cleartext Storage of Sensitive Information in an Environment Variable1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.