Skip to content

CVE-2026-18963

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
August 21, 2026
Last Seen
August 21, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Account Takeover Vulnerability in Red Hat Keycloak78.0

A critical vulnerability (CVE-2026-18963) has been identified in the reset-credentials flow of the keycloak-services component of Red Hat Build of Keycloak. This flaw allows unauthenticated attackers to reset passwords for any user without email verification, leading to potential account takeover. T...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-640 - Weak Password Recovery Mechanism for Forgotten PasswordT1098 - Account ManipulationWeak Password Recovery Mechanism For Forgotten Password