https://vulnerability.circl.lu/sightings/feed 2026-08-20T19:42:29.056723+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b6f24f74-788e-4613-bee5-9042ea08d05f/export 2026-08-20T19:42:29.081037+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b6f24f74-788e-4613-bee5-9042ea08d05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5oqdao227", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:35.808323Z"} 2026-08-20T11:35:35.808323+00:00 https://vulnerability.circl.lu/sighting/053d44e9-f968-4687-8d49-b7df74885112/export 2026-08-20T19:42:29.083837+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "053d44e9-f968-4687-8d49-b7df74885112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5opfy5c27", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:09.784406Z"} 2026-08-20T11:35:09.784406+00:00 https://vulnerability.circl.lu/sighting/06c41b45-64c3-4919-89c1-e17d1f612c7b/export 2026-08-20T19:42:29.083944+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "06c41b45-64c3-4919-89c1-e17d1f612c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5omzyis27", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:09.318259Z"} 2026-08-20T11:35:09.318259+00:00 https://vulnerability.circl.lu/sighting/8344a79d-8bb3-425d-b4b6-15873f468cf4/export 2026-08-20T19:42:29.084017+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8344a79d-8bb3-425d-b4b6-15873f468cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtj5mik5tt2f", "content": "\u26a0\ufe0f PATCH NOW\n\nKeycloak, the widely used single sign-on server, has a critical flaw (CVE-2026-18963) that lets a stranger reset any user's password and take over the account with no login.\n\nFix: update to 26.7.2 now.\n\nThe 26.4 and 26.6 support lines have no released patch yet.", "creation_timestamp": "2026-08-20T11:33:52.879179Z"} 2026-08-20T11:33:52.879179+00:00 https://vulnerability.circl.lu/sighting/bfa9c3c4-27bf-4838-a495-618dd9b121b1/export 2026-08-20T19:42:29.084087+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bfa9c3c4-27bf-4838-a495-618dd9b121b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/hacksilon.infosec.exchange.ap.brid.gy/post/3mth7jbccomz2", "content": "PSA: Critical account takeover vulnerability in #Keycloak - allows resetting arbitrary users\u2018 passwords. Update to 26.7.2 immediately or disable password reset. Tracked as CVE-2026-18963. https://github.com/keycloak/keycloak/issues/51833\n\n#infosec", "creation_timestamp": "2026-08-19T17:03:32.556725Z"} 2026-08-19T17:03:32.556725+00:00 https://vulnerability.circl.lu/sighting/92df904e-70b1-4022-8cf1-75f653a0c133/export 2026-08-20T19:42:29.084158+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "92df904e-70b1-4022-8cf1-75f653a0c133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtewqb76ms2c", "content": "CVE-2026-18963 - red hat build of keycloak\nAn attacker can reset any user's password without verification, gaining control over their account. This affects the identity and access management in Red Hat Build of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-18T19:20:04.373523Z"} 2026-08-18T19:20:04.373523+00:00 https://vulnerability.circl.lu/sighting/98ea40c0-bfb4-4b7c-8f8d-737d2e7ccfa1/export 2026-08-20T19:42:29.084226+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "98ea40c0-bfb4-4b7c-8f8d-737d2e7ccfa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtestacb3z2u", "content": "\ud83d\udea8 CVE-2026-18963 \u2014 CVSS 9.1 CRITICAL\n\nA flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18963\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T18:10:08.602372Z"} 2026-08-18T18:10:08.602372+00:00