{"uuid": "bc657d6b-be1e-4a08-b2cc-2ad21ea86d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://t.me/thehackernews/9875", "content": "\u203c\ufe0f A critical Keycloak flaw could let attackers take over any account.\n\nCVE-2026-18963 lets an unauthenticated attacker reset a user\u2019s password without the emailed action token, including for admin accounts.\n\nRead more: https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html", "creation_timestamp": "2026-08-24T14:00:03.989295Z"}