Dromara MaxKey vulnerabilities
4 published CVEs name Dromara MaxKey among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-69102
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
dromara · MaxKey
Critical9.3 - CVE-2026-67345
MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
dromara · MaxKey
High8.5 - CVE-2026-7699
Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection
Dromara · MaxKey
Medium5.3 - CVE-2025-6517
Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
Dromara · MaxKey
Medium5.3