https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 20 Aug 2026 20:35:32 +0000 https://vulnerability.circl.lu/sighting/b6f24f74-788e-4613-bee5-9042ea08d05f/export {"uuid": "b6f24f74-788e-4613-bee5-9042ea08d05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5oqdao227", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:35.808323Z"} {"uuid": "b6f24f74-788e-4613-bee5-9042ea08d05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5oqdao227", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:35.808323Z"} https://vulnerability.circl.lu/sighting/b6f24f74-788e-4613-bee5-9042ea08d05f/export Thu, 20 Aug 2026 11:35:35 +0000 https://vulnerability.circl.lu/sighting/053d44e9-f968-4687-8d49-b7df74885112/export {"uuid": "053d44e9-f968-4687-8d49-b7df74885112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5opfy5c27", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:09.784406Z"} {"uuid": "053d44e9-f968-4687-8d49-b7df74885112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5opfy5c27", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:09.784406Z"} https://vulnerability.circl.lu/sighting/053d44e9-f968-4687-8d49-b7df74885112/export Thu, 20 Aug 2026 11:35:09 +0000 https://vulnerability.circl.lu/sighting/06c41b45-64c3-4919-89c1-e17d1f612c7b/export {"uuid": "06c41b45-64c3-4919-89c1-e17d1f612c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5omzyis27", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:09.318259Z"} {"uuid": "06c41b45-64c3-4919-89c1-e17d1f612c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mtj5omzyis27", "content": "\ud83d\udea8 Dutch NCSC warns about CVE-2026-18963, a critical Keycloak password-reset vulnerability. \ud83d\udd10\n\nAffected systems may be exposed to unauthenticated account takeover.\n\nWhat to check and how to fix it:\nbasefortify.eu/posts/2026/0...\n\n#Keycloak #CyberSecurity", "creation_timestamp": "2026-08-20T11:35:09.318259Z"} https://vulnerability.circl.lu/sighting/06c41b45-64c3-4919-89c1-e17d1f612c7b/export Thu, 20 Aug 2026 11:35:09 +0000 https://vulnerability.circl.lu/sighting/8344a79d-8bb3-425d-b4b6-15873f468cf4/export {"uuid": "8344a79d-8bb3-425d-b4b6-15873f468cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtj5mik5tt2f", "content": "\u26a0\ufe0f PATCH NOW\n\nKeycloak, the widely used single sign-on server, has a critical flaw (CVE-2026-18963) that lets a stranger reset any user's password and take over the account with no login.\n\nFix: update to 26.7.2 now.\n\nThe 26.4 and 26.6 support lines have no released patch yet.", "creation_timestamp": "2026-08-20T11:33:52.879179Z"} {"uuid": "8344a79d-8bb3-425d-b4b6-15873f468cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtj5mik5tt2f", "content": "\u26a0\ufe0f PATCH NOW\n\nKeycloak, the widely used single sign-on server, has a critical flaw (CVE-2026-18963) that lets a stranger reset any user's password and take over the account with no login.\n\nFix: update to 26.7.2 now.\n\nThe 26.4 and 26.6 support lines have no released patch yet.", "creation_timestamp": "2026-08-20T11:33:52.879179Z"} https://vulnerability.circl.lu/sighting/8344a79d-8bb3-425d-b4b6-15873f468cf4/export Thu, 20 Aug 2026 11:33:52 +0000 https://vulnerability.circl.lu/sighting/bfa9c3c4-27bf-4838-a495-618dd9b121b1/export {"uuid": "bfa9c3c4-27bf-4838-a495-618dd9b121b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/hacksilon.infosec.exchange.ap.brid.gy/post/3mth7jbccomz2", "content": "PSA: Critical account takeover vulnerability in #Keycloak - allows resetting arbitrary users\u2018 passwords. Update to 26.7.2 immediately or disable password reset. Tracked as CVE-2026-18963. https://github.com/keycloak/keycloak/issues/51833\n\n#infosec", "creation_timestamp": "2026-08-19T17:03:32.556725Z"} {"uuid": "bfa9c3c4-27bf-4838-a495-618dd9b121b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/hacksilon.infosec.exchange.ap.brid.gy/post/3mth7jbccomz2", "content": "PSA: Critical account takeover vulnerability in #Keycloak - allows resetting arbitrary users\u2018 passwords. Update to 26.7.2 immediately or disable password reset. Tracked as CVE-2026-18963. https://github.com/keycloak/keycloak/issues/51833\n\n#infosec", "creation_timestamp": "2026-08-19T17:03:32.556725Z"} https://vulnerability.circl.lu/sighting/bfa9c3c4-27bf-4838-a495-618dd9b121b1/export Wed, 19 Aug 2026 17:03:32 +0000 https://vulnerability.circl.lu/sighting/92df904e-70b1-4022-8cf1-75f653a0c133/export {"uuid": "92df904e-70b1-4022-8cf1-75f653a0c133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtewqb76ms2c", "content": "CVE-2026-18963 - red hat build of keycloak\nAn attacker can reset any user's password without verification, gaining control over their account. This affects the identity and access management in Red Hat Build of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-18T19:20:04.373523Z"} {"uuid": "92df904e-70b1-4022-8cf1-75f653a0c133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtewqb76ms2c", "content": "CVE-2026-18963 - red hat build of keycloak\nAn attacker can reset any user's password without verification, gaining control over their account. This affects the identity and access management in Red Hat Build of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-18T19:20:04.373523Z"} https://vulnerability.circl.lu/sighting/92df904e-70b1-4022-8cf1-75f653a0c133/export Tue, 18 Aug 2026 19:20:04 +0000 https://vulnerability.circl.lu/sighting/98ea40c0-bfb4-4b7c-8f8d-737d2e7ccfa1/export {"uuid": "98ea40c0-bfb4-4b7c-8f8d-737d2e7ccfa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtestacb3z2u", "content": "\ud83d\udea8 CVE-2026-18963 \u2014 CVSS 9.1 CRITICAL\n\nA flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18963\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T18:10:08.602372Z"} {"uuid": "98ea40c0-bfb4-4b7c-8f8d-737d2e7ccfa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18963", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtestacb3z2u", "content": "\ud83d\udea8 CVE-2026-18963 \u2014 CVSS 9.1 CRITICAL\n\nA flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18963\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T18:10:08.602372Z"} https://vulnerability.circl.lu/sighting/98ea40c0-bfb4-4b7c-8f8d-737d2e7ccfa1/export Tue, 18 Aug 2026 18:10:08 +0000