Keycloak Access Management: Account Takeover via Password Reset Function

By with∅ut-me 25.08.2026 at 08:47 Uhr Laws & Rights IT & Internet
TL;DR AI-generated A critical security vulnerability (CVE-2026-18963) in Keycloak allows unauthorized users to take over accounts by exploiting the password reset function. Developers have fixed seven vulnerabilities in version 26.7.2.

Source: heise.de

0 votes

Discussion

Log in to join the discussion.

No comments yet. Be the first!