Critical Keycloak Vulnerability (CVE-2026-18963) Enables Account Takeover via Password Reset Bypass
A serious security issue has surfaced in Keycloak, the popular open-source identity and access management solution used by organizations worldwide for single sign-on, OAuth flows, and application authentication. Red Hat, which maintains the project, along with the Keycloak development team, issued updates to address a high-severity vulnerability that allows unauthenticated attackers to reset passwords and