CVE-2026-125652 Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry point

A flaw was found in the keycloak-services component of Keycloak, which provides the core authentication and authorization logic for the identity provider. The issue occurs when a user initiates a login after visiting the password reset page, causing the system to skip mandatory security checks fo...