vulnerability
Multiples vulnérabilités dans Keycloak (25 août 2026)
Medium
Summary
Multiple vulnerabilities have been discovered in Keycloak, allowing an attacker to bypass security policies and potentially take control of an account if they know its identifier. The CERT-FR has a proof of concept for CVE-2026-18963. Red Hat recommends disabling the 'Forgot password' feature as a temporary mitigation until updates are applied.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data