Login Request a demo
MA
Product
MaxKey
by dromara · last CVE Aug 11, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MaxKey to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-69102
9.8
1%
Aug 11
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
Affected: through 4.1.11
CVE-2025-6517
9.8
1%
Jun 23
Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +2 more
CVE-2026-67345
8.1
1%
Jul 30
MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
Affected: through 4.1.12
CVE-2026-7699
6.3
0%
May 3
Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection
Affected: 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +8 more
Showing 4