Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-services@26.7.0
purl pkg:maven/org.keycloak/keycloak-services@26.7.0
Next non-vulnerable version 26.7.2
Latest non-vulnerable version 26.7.2
Risk score 10.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-4gv3-mc9p-5wqc
Aliases:
CVE-2026-18963
Keycloak: Unauthenticated account takeover via reset-credentials flow bypass A flaw was found in the reset-credentials flow of the keycloak-services component, …
26.7.2
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-6g26-7cx5-mrrg
Keycloak: Information disclosure due to user profile permission bypass A flaw was found in org.keycloak.services. An administrator with delegated access … CVE-2026-9088