Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Red Hat and the Keycloak project patched CVE-2026-18963, a 9.1-rated flaw in the open-source identity and access management server that lets an unauthenticated remote attacker take over any account, including administrative accounts, by forcing a password...