CVE-2026-18963 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips...

KeySniper

KeySniper 作者： Mitsec — x.com/ynsmroztas CVE-2026-18963 — 通过重置凭据流程实现未认证的 Keycloak 账户接管。 KeySniper 是一款面向生产环境的扫描器，适用于范围内的漏洞赏金和授权评估：实时雷达输出、领域（realm）发现、检测与接管区分、交互式 ATO 后 Shell，以及标准输入管道（subfinder → httpx → KeySniper）。 默认模式为检测 （--takeover 0）。--takeover 1 会修改目标上的账户密码。 漏洞 字段| 值 ---|--- CVE| CVE-2026-18963...

Keycloak_CVE-2026-18963_PoC

CVE-2026-18963 Keycloak reset-credentials bypass → unauthenticated account takeover CVSS 9.1 | Affected: Keycloak 26.0.0 – 26.7.1 Layout root@kitploit: CVE-2026-18963/ ├── cve202618963poc.py - PoC script Python 3.9+, stdlib only ├── README.md ├── docker-compose.yml - Lab environment └──...

CVE-2026-18963_analyst

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

Exploit for CVE-2026-18963

CVE-2026-18963 — Lab tái dựng lại Keycloak reset-credentials...

Exploit for CVE-2026-18963

POC-CVE-20...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak reset-credentials bypass → unauthent...

Keycloak 26.4.x < 26.4.15 / 26.6.x < 26.6.6 Unauthenticated Account Takeover

The version of Keycloak installed on the remote host is 26.4.x prior to 26.4.15, or 26.6.x prior to 26.6.6. It is, therefore, affected by a vulnerability: - A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.15 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.15 and Red Hat build of Keycloak 26.4.15 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Images Security Update

New images are available for Red Hat build of Keycloak 26.6.6 and Red Hat build of Keycloak 26.6.6 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Security Update

New Red Hat build of Keycloak 26.6.6 packages are available from the Customer Portal Red Hat build of Keycloak 26.6.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.15 Security Update

New Red Hat build of Keycloak 26.4.15 packages are available from the Customer Portal Red Hat build of Keycloak 26.4.15 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

CVE-2026-18963

creationtimestamp| type| source ---|---|--- 2026-08-18 18:10:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtestacb3z2u 2026-08-18 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtewqb76ms2c 2026-08-19 17:03:32+00:00| seen|...