Keycloak_CVE-2026-18963_PoC

CVE-2026-18963 Keycloak reset-credentials bypass → unauthenticated account takeover CVSS 9.1 | Affected: Keycloak 26.0.0 – 26.7.1 Layout root@kitploit: CVE-2026-18963/ ├── cve202618963poc.py - PoC script Python 3.9+, stdlib only ├── README.md ├── docker-compose.yml - Lab environment └──...

CVE-2026-18963_analyst

Open Source Identity and Access Management...

CVE-2026-18963 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, keycloak-fips, keycloak...

KeySniper

KeySniper Author: Mitsec — x.com/ynsmroztas CVE-2026-18963 — unauthenticated Keycloak account takeover via the reset-credentials flow. KeySniper is a production-oriented scanner for in-scope bug bounty and authorized assessments: live radar output, realm discovery, detect vs takeover, interactive...

Exploit for CVE-2026-18963

CVE-2026-18963 — Lab tái dựng lại Keycloak reset-credentials...

Exploit for CVE-2026-18963

POC-CVE-20...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak reset-credentials bypass → unauthent...

Keycloak 26.4.x < 26.4.15 / 26.6.x < 26.6.6 Unauthenticated Account Takeover

The version of Keycloak installed on the remote host is 26.4.x prior to 26.4.15, or 26.6.x prior to 26.6.6. It is, therefore, affected by a vulnerability: - A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.15 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.15 and Red Hat build of Keycloak 26.4.15 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Images Security Update

New images are available for Red Hat build of Keycloak 26.6.6 and Red Hat build of Keycloak 26.6.6 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Security Update

New Red Hat build of Keycloak 26.6.6 packages are available from the Customer Portal Red Hat build of Keycloak 26.6.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.15 Security Update

New Red Hat build of Keycloak 26.4.15 packages are available from the Customer Portal Red Hat build of Keycloak 26.4.15 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

CVE-2026-18963

creationtimestamp| type| source ---|---|--- 2026-08-18 18:10:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtestacb3z2u 2026-08-18 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtewqb76ms2c 2026-08-19 17:03:32+00:00| seen|...

CVE-2019-18963

CVE-2019-18963 is rejected and not an active vulnerability entry.

CVE-2019-18963

...

CVE-2018-18963

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

CVE-2018-18963

The CVE-2018-18963 affects Degrau Publicidade e Internet Plataforma de E-commerce; the issue is a SQL Injection in the Busca.aspx.cs file exploitable via the busca/ URI. The CNVD entry confirms a SQL injection vulnerability exists in that file. No explicit root-cause details or patch/mitigation a...