CVE Watch23 oct 2026

CVE-2026-18963

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access manageme

CVSS

9.1

Crítico

EPSS

6.6%

p94

KEV

—

Exploit Today

0-100

Publicado: 18 ago 2026 · Última mod.: 23 oct 2026 · CWE-640

EPSS · 30d

3.2%EPSS · 30 días6.6%

2026-10-142026-11-11

Descripción técnica

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1261509.1 CRÍ

—

——0A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to reset the password of an arbitrary IBE webmail user and take over their account via specially crafted HTTP requests.17h CVE-2026-1187418.1 ALT

55.6%

——17Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.1d CVE-2026-600467.5 ALT

24.9%

——7An unauthenticated remote attacker can perform password resets for any user with known username and email without rate limiting. This can result in a total loss of availabilit since the password will be reseted.2d CVE-2026-1250747.3 ALT

22.3%

——7A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown function of the file reset_password.php of the component Password Reset. This manipulation of the argument username/password causes weak password recovery. The attack is possible to be carried out remotely. The exploit has been published and may be used.3d CVE-2026-118459—

25.6%

——8A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials.3d CVE-2026-1231968.1 ALT

29.8%

——9Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST gateway to capture reset or magic-link tokens and take over accounts.3d