Tag: CVE-2026-18963

Password reset bypass in Keycloak opens every account to takeover

Red Hat patches a critical Keycloak flaw that lets unauthenticated attackers seize any account, including admins.