01EntryItem

Archive

1. RepoSecurity12 Sept 2026

   KeyCloak Exploit

   This exploit for Keycloak CVE-2026-18963 lets an unauthenticated attacker set an arbitrary password on any account knowing only a username or email. It affects 26.0.0–26.7.1, fixed in 26.7.2, and is a valuable PoC for researchers.

   SourceDetailsinteresting-repos post