CVE-2025-7365
CVE-2025-7365: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityHigh7.1
High [CVE-2025-7365] phishing attack via email verification step in first login flow
CVE-2025-7365Source published Source updated
A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account during an identity provider (IdP) login, the attacker will subsequently be prompted to "review profile" information. This vulnerability allows the attacker to modify their email address to match that of a victim's account, triggering a verification email sent to the victim's email address. The attacker's email address is not present in the verification email content, making it a potential phishing opportunity. If the victim clicks the verification link, the attacker can gain access to the victim's account. Affected products named by the advisory: Red Hat build of Keycloak 26.0; Red Hat build of Keycloak 26.2.
- Affected products in this advisory
- Red Hat build of Keycloak 26.0
- Red Hat build of Keycloak 26.2
- Source-reported affected versions
- before 26.0.13
- 26.2.0 before 26.2.6
- Source-reported fixed versions
- 26.0.13
- 26.2.6
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.