MaxKey
Dromara · 4 CVEs
CVE-2026-69102
CRITICAL
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
Aug 11, 2026
CVE-2026-67345
HIGH
MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
Jul 30, 2026
CVE-2026-7699
MEDIUM
Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection
May 3, 2026
CVE-2025-6517
MEDIUM
Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
Jun 23, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-69102 | MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust | CRITICAL | 0.64% | Aug 11, 2026 |
| CVE-2026-67345 | MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft | HIGH | 0.56% | Jul 30, 2026 |
| CVE-2026-7699 | Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection | MEDIUM | 0.32% | May 3, 2026 |
| CVE-2025-6517 | Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery | MEDIUM | 0.53% | Jun 23, 2025 |
Showing 1 to 4 of 4 CVEs