ory

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ory records in CISA KEV

No ory vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Kratos · all components

TI-2026-25899 CVE-2026-33503 · GHSA-hgx2-28f8-6g2r

LOW 33

Ory Kratos is an identity, user management and authentication system for cloud services.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00262 Published 2026-03-26 Fixed in 26.2.0, 1.3.1-0.20260320110106-9d7085948039 CWE-89