vulnerability Multiples vulnérabilités dans Keycloak (25 août 2026) Multiple vulnerabilities have been discovered in Keycloak, allowing an attacker to bypass security policies and potentially take control of an account if they know its identifier. The CERT-FR has a proof of concept for CVE-2026-18963. Red Hat recommends disabling the 'Forgot password' feature as a temporary mitigation… CERT-FR · 5d ago Medium CVE-2026-18963CVE-2026-14613CVE-2026-15571keycloakvulnerabilityauthentication
vulnerability Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account A critical vulnerability (CVE-2026-18963) in Keycloak allows unauthenticated attackers to force a password reset and take over any user account, including administrative accounts. Red Hat and Keycloak have released patch… The Hacker News · 6d ago Critical CVE-2026-18963CVE-2026-15571password-resetauthenticationkeycloak
