Posts tagged: Cve-2026-18963

August 24, 2026 7 min read 📰 Newsletter

Keycloak Account Takeover — CVE-2026-18963 CVSS 9.1

CVE-2026-18963 allows unauthenticated Keycloak password resets. Plus Iran-linked OT attack shuts UK power plant and Spring ships 91 CVE patches.

cybersecurity daily-brief newsletter

August 24, 2026 6 min read 📰 Newsletter

Keycloak Account-Takeover RCE — CVE-2026-18963

CVE-2026-18963 lets unauthenticated attackers reset any Keycloak account. Plus SynkLoader steals creds via fake lock screens and Teams blocks bots.

cybersecurity daily-brief newsletter