Login Request a demo
MA
Product
MaxKey
by dromara · last CVE Aug 11, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MaxKey to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-69102
9.8
1%
Aug 11
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
Affected: through 4.1.11
CVE-2025-6517
9.8
1%
Jun 23
Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +2 more
Showing 2