Maxkey - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-11.

Products

• Maxkey - 3 CVEs

Newest CVEs of Maxkey

• CVE-2026-69102 - CVSS 9.8 (critical), 2026-08-11: MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated…
• CVE-2026-67345 - CVSS 8.5 (high), 2026-07-30: MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedirectResolver.hostMatches() that…
• CVE-2025-6517 - CVSS 9.8 (critical), 2025-06-23: A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file…