#cve-2026-18963

Critical Keycloak Bug Lets Anyone Reset Your Password and Log In as You

A 9.1-severity flaw in the popular open-source login server hands attackers full account takeover with no credentials required.