CVE-2026-118030

A race condition exists in the HOTP authentication mechanism of the keycloak-services component, which provides identity and access management services. The vulnerability arises because the system validates a one-time password and updates its internal counter in two distinct steps without proper ...