Advisory details:
github_osv / GHSA-4gv3-mc9p-5wqc
| Advisory ID | github_osv/GHSA-4gv3-mc9p-5wqc |
| Aliases |
CVE-2026-18963
|
| Summary | Keycloak: Unauthenticated account takeover via reset-credentials flow bypass A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 8.2 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | 9.1 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-4gv3-mc9p-5wqc/GHSA-4gv3-mc9p-5wqc.json |
| generic_textual | CRITICAL |
| Data source | Exploit-DB |
|---|---|
| Date added | Oct. 21, 2026 |
| Description | Keycloak 26.7.2 - Unauthenticated Account Takeover |
| Ransomware campaign use | Unknown |
| Source publication date | Oct. 21, 2026 |
| Exploit type | webapps |
| Platform | multiple |
| Source update date | Oct. 21, 2026 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-08-20T13:53:38Z/
Decision: Track
Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/18xxx/CVE-2026-18963.json
Source Advisory: vulnrichment/CVE-2026-18963
[{'Exploitation': 'none'},
{'Automatable': 'yes'},
{'Technical Impact': 'total'},
{'Mission Prevalence': 'minimal'},
{'Public Well-being Impact': 'material'},
{'Mission & Well-being': 'medium'}]