CVE-2025-12150Low· 3.1▾ SunlitA flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object wit…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 17.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 9.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.2%
A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object with fmt: "none", even when the realm is configured to require direct attestation. This can lead to weakened authentication integrity and unauthorized authenticator registration.
build_of_keycloak < 26.4.4build_of_keycloakkeycloak = 24.0.2Upgrade past the affected range:
build_of_keycloak 26.4.4Connected by shared product, vendor, weakness, or advisory.
CVE-2026-9793Medium· 5.9A flaw was found in Keycloak
CVE-2026-7307High· 7.5A flaw was found in Keycloak
CVE-2026-7507High· 7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints
CVE-2026-2575Medium· 5.3A flaw was found in Keycloak
CVE-2026-4634High· 7.5A flaw was found in Keycloak
CVE-2025-3910Medium· 5.4A flaw was found in Keycloak