https://blog.it-learn.io/tags/cve-2026-18963/Recent content in Cve-2026-18963 on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usMon, 24 Aug 2026 00:00:00 +0000https://blog.it-learn.io/posts/2026-08-24-keycloak-account-takeover-cve-2026-18963-cvss-9-1/Mon, 24 Aug 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/posts/2026-08-24-keycloak-account-takeover-cve-2026-18963-cvss-9-1/CVE-2026-18963 (CVSS 9.1) lets remote attackers reset any Keycloak password without authentication — every federated app behind it is exposed. Also today: Iran-linked hackers shut down a UK power plant for four days in the first confirmed nation-state OT attack causing sustained Western energy downtime, and Spring Framework’s 10x vulnerability surge forces a remediation capacity conversation.https://blog.it-learn.io/identity/2026-08-24-identity-keycloak-account-takeover-rce-cve-2026-18963/Mon, 24 Aug 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/identity/2026-08-24-identity-keycloak-account-takeover-rce-cve-2026-18963/CVE-2026-18963 is a CVSS 9.1 unauthenticated password-reset flaw in Keycloak that lets attackers hijack any account without credentials or MFA bypass. SynkLoader malware uses fake Windows lock screens delivered through Teams phishing to harvest credentials in real time. Microsoft ships a new admin toggle to block external bots from meetings. Plus: device-code phishing survives passkeys, and 9,300 AWS keys remain active on GitHub.