CVE detail
CVE-2025-12150
A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object with fmt: "none", even when the realm is configured to require direct attestation. This can lead to weakened authentication integrity and unauthorized authenticator registration.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
No excerpt available.
Exploitgithub.comFeb 27, 2026, 9:16 AM- https://bugzilla.redhat.com/show_bug.cgi?id=2406192bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comFeb 27, 2026, 9:16 AM - https://access.redhat.com/security/cve/CVE-2025-12150access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2025:22089access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2025:22088access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2025:21371access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2025:21370access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 27, 2026, 9:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-11800CVSS 8.1 · High
A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature v…
- CVE-2026-9793CVSS 5.9 · Medium
A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is…
- CVE-2019-10201CVSS 8.1 · High
It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> se…
- CVE-2026-3047CVSS 8.8 · High
A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initiated broker landing…
- CVE-2026-0871CVSS 4.9 · Medium
A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, allowing them to modi…
- CVE-2024-7341CVSS 7.1 · High
A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the turnOffChangeS…