Vulnerabilities

Critical Keycloak Flaw Allows Account Takeover

August 24, 2026 1 min read 5 views
cybersecurity threats news
Red Hat and Keycloak patched CVE-2026-18963, a critical flaw allowing unauthenticated attackers to force password resets and take over any account.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.