Tag: cve 2026 18963

Keycloak Flaw Exposes Accounts to Unauthenticated Takeover

A critical flaw in Keycloak, rated 9.1 by Red Hat, allows hackers to hijack any account, including admin ones, by manipulating the password reset process. This vulnerability, CVE-2026-18963, lets attackers take control without even logging in.