CVE-2025-14083

—

CVSS 3.1

2.7 low

EPSS

<1%p26

Published

Jan 21, 2026 (Jan 21, 2026)

Modified

Jun 17, 2026

Description

A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.

Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.