CVE-2025-3910

mediumpriority · track · 22EPSS 0.004 · 38 %ileDEEUNLUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (38th) EPSS

CVSS 5.4 · medium

Is it mine?

19 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · scored 2026-10-23

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

cvss

Technical severity, 0–10. One row per scoring source.

5.4

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 2.5

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:Nsecondary · ENISA EU

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:Nsecondary · secalert@redhat.com USexploitability 2.8 · impact 2.5

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:Nsecondary · OSV

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USCWE-287USCWE-287US

affected products (19)

Products and version ranges known to be affected.

Hitachi Ops Centerall versionscert_bundDEcpe:/a:hitachi:ops_center:-
Open Source Keycloak <26.2.2all versionscert_bundDE
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux build of Keycloak <26.0.11all versionscert_bundDE
Open Source Keycloak< 26.2.2cert_bundDE
Red Hat Enterprise Linux≤ build of Keycloak <26.0.11cert_bundDE
Red Hat Red Hat build of Keycloak 26.0< 26.0-12enisa_euvdEU
Red Hat Red Hat build of Keycloak 26.0< 26.0-13enisa_euvdEU
Red Hat Red Hat build of Keycloak 26.0< 26.0.11-2enisa_euvdEU
Red Hat build of Keycloak 26.0≤ vers:rpm/26.0ncsc_nlNLcpe:/a:redhat:build_keycloak:26.0::el9
keycloak-rhel9≤ vers:oci/26.0-1745967474ncsc_nlNLpkg:oci/keycloak-rhel9@sha256:87ff67880fd7f44174b263759c99f4d701cf208eeb6f4abf636a10b98ec023d0?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.0-1745967474
keycloak-rhel9-operator≤ vers:oci/26.0-1745967472ncsc_nlNLpkg:oci/keycloak-rhel9-operator@sha256:acd2a3adf7365e62689b79608c2289c804f47f97a81f9e8ddf3fecdce6d6f0ec?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.0-1745967472
Open Source Keycloak≤ vers:unknown/<26.2.2ncsc_nlNL
Red Hat keycloak-rhel9≤ vers:rpm/26.0-12ncsc_nlNL
Red Hat keycloak-rhel9-operator≤ vers:rpm/26.0-13ncsc_nlNL
Red Hat org.keycloak.authentication≤ vers:rpm/unknownncsc_nlNL
redhat build of keycloak26.0 → 26.0.11nvdUScpe:2.3:a:redhat:build_of_keycloak:*:*:*:*:*:*:*:*
Bitnami keycloak26.0.0 → 26.0.11osvUSpkg:bitnami/keycloak
Maven org.keycloak:keycloak-services< 26.2.2osvUSpkg:maven/org.keycloak/keycloak-services

advisories (4)

Vendor and ecosystem advisories describing this.

NCSC-2025-0141Kwetsbaarheden verholpen in KeycloakNL2025-05-06csaf · ncsc_nlNL
Red Hat heeft kwetsbaarheden verholpen in Keycloak.
WID-SEC-W-2025-0908Keycloack: Mehrere Schwachstellen ermöglichen Umgehen von SicherheitsvorkehrungenDeutsch2025-04-29csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Keycloack ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
GHSA-5jfq-x6xp-7rw2Keycloak vulnerable to two factor authentication bypass2025-04-30ghsa · osvUS
# Description A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.
BIT-keycloak-2025-3910Org.keycloak.authentication: two factor authentication bypass2026-08-25vendor · osvUS
A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2025-04-29modified 2026-09-21

references (18)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan