Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...

CVE-2026-18963-Exploit

CVE-2026-18963 — Bypass de reset-credentials en Keycloak → toma de control de cuenta no autenticada Conociendo solo un nombre de usuario o dirección de correo electrónico , un atacante no autenticado establece una contraseña arbitraria en cualquier cuenta de Keycloak. El correo de restablecimient...

CVE-2026-18963

CVE-2026-18963 Keycloak Unauthenticated Account Takeover ★ CVE-2026-18963 Keycloak Reset-Credentials Flow Bypass PoC ★ https://github.com/user-attachments/assets/ebed1e64-a40c-4333-be18-9acbadd655b0 Overview CVE-2026-18963 is a critical unauthenticated account takeover vulnerability in the Keyclo...

KeySniper

KeySniper Autor: Mitsec — x.com/ynsmroztas CVE-2026-18963 — toma de control de cuenta Keycloak sin autenticación mediante el flujo de restablecimiento de credenciales. KeySniper es un escáner orientado a producción para programas de bug bounty dentro del alcance y evaluaciones autorizadas: salida...

CVE-2026-18963-keycloak

CVE-2026-18963-keycloak CVE-2026-18963 — Bypass de reset-credentials en Keycloak - Toma de control de cuenta...

keycloak-CVE-2026-18963

CVE-2026-18963 - Bypass del flujo reset-credentials de Keycloak Configuración de Docker para probar las versiones de Keycloak 26.x afectadas por el bypass del flujo reset-credentials. El laboratorio incluido fija Keycloak 26.6.2 , que está en el rango afectado 26.0 y --username \ --new-password '...

CVE-2026-18963

Keycloak Reset Path Finder Plantilla de Nuclei para descubrir endpoints expuestos de reset-credentials de Keycloak a través de múltiples prefijos de proxy, rutas de contexto, nombres de realm y variaciones de ruta. Resumen Esta plantilla ayuda a identificar flujos de restablecimiento de contraseñ...

Exploit for CVE-2026-18963

CVE-2026-18963-ke...

Exploit for CVE-2026-18963

My-Exploits Vulnerability research I have done on four widely...

Exploit for CVE-2026-18963

0day-Exploits Vulnerability research I have done on four wide...

Authentication Bypass

Red Hat Build of Keycloak keycloak-services is vulnerable to an authentication bypass. The vulnerability is due to improper validation in the reset-credentials flow, which allows an unauthenticated attacker to bypass the required email verification step and directly set new credentials...

Exploit for CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detecto...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak reset-credentials flow bypass Autho...

BIT-KEYCLOAK-2026-18963 Flaw in the reset-credentials flow of the keycloak-services component

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak Unauthenticated Account Takeover...

Exploit for CVE-2026-18963

CVE-2026-18963 Keycloak reset-credentials bypass → unauthent...

Exploit for CVE-2026-18963

CVE-2026-18963 — Lab tái dựng lại Keycloak reset-credentials...

Exploit for CVE-2026-18963

CVE-2026-18963 Keycloak reset-credentials bypass → unauthenti...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account T...

Keycloak 26.4.x < 26.4.15 / 26.6.x < 26.6.6 Unauthenticated Account Takeover

The version of Keycloak installed on the remote host is 26.4.x prior to 26.4.15, or 26.6.x prior to 26.6.6. It is, therefore, affected by a vulnerability: - A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access...