Search: CVE-2025-14559

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.5%	CVE-2025-14559Red Hat build of Keycloak 26.4 · CWE-840 Medium6.5EPSS 0.5%2026-01-21CVE Database V5CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow. EPSS 0.5%Vulnerability CWE-840	CVE Database V5	2026-01-21

Page 1 of 1