What’s Vulnerable › Products
Duende IdentityServer4 vulnerabilities
1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your Duende IdentityServer4 version is affected
Latest Duende IdentityServer4 vulnerabilities
- CVE-2026-4349 — Duende IdentityServer4 Token Renewal Endpoint authorize improper authentication (CVSS 5.6)