Dromara MaxKey vulnerabilities
4 published CVEs name Dromara MaxKey among the affected products.
- Published CVEs
- 4
- Last 12 months
- 3
- Critical
- 1
- Known exploited
- 0
Critical 1High 1Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20251
- 20263
Newest CVEs
- CVE-2026-69102
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
dromara · MaxKey
Critical9.3 - CVE-2026-67345
MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
dromara · MaxKey
High8.5 - CVE-2026-7699
Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection
Dromara · MaxKey
Medium5.3 - CVE-2025-6517
Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
Dromara · MaxKey
Medium5.3