KEV Entry

CVE-2026-18963

Known Exploited Vulnerability Entry KEVIntel

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-18963

2026-08-25 15:13 UTC

Timestamps

2026-08-25

2026-08-25

Scope

Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass | Affected: Red Hat / Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.15, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.6, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Single Sign-On 7 | CVSS: 9.1 (CRITICAL) | EPSS: 0.02788 | Used in malware: unknown | Not yet in CISA KEV: True

References
  • {'id': 'CVE-2026-18963', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-18963'}
  • {'id': 'previdian', 'url': 'https://previdian.com/CVE-2026-18963'}

b47b722e-3b9c-4f17-839a-7be8e6e79759

KEVIntel
caeb2787-0d58-4236-9039-7c86c3e566f3

2026-08-26 16:00 UTC

2026-08-26 16:00 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report previdian successful_exploitation 0.70
View details 
{
  "added_date": "2026-08-25T15:13:17.550Z",
  "ahead_of_cisa_kev": null,
  "cvss_score": 9.1,
  "cvss_severity": "CRITICAL",
  "epss_percentile": 0.85319,
  "epss_score": 0.02788,
  "feed": "Previdian (previdian.com)",
  "not_yet_in_cisa_kev": true,
  "product": "Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.15, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.6, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Single Sign-On 7",
  "title": "Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass",
  "used_in_malware": "unknown",
  "vendor": "Red Hat"
}
 -
Export Options
JSON Object JSON API View Full Catalog