Skip to content

CVE-2026-90997

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 18, 2026
Last Seen
September 18, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Keycloak Vulnerability CVE-2026-90997 Allows Replay Attacks67.5

A high-impact vulnerability (CVE-2026-90997) was identified in Keycloak when deployed in stateless mode with MySQL or MariaDB. The flaw arises from a mismatch in row-count semantics between the database driver and Keycloak's logic, enabling attackers to bypass replay protection. This allows intercep...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-200 - Exposure of Sensitive InformationCWE-287 - Improper Authentication