Precursor Intelligence

Threat News

Latest cyber threat intelligence, breaches and exploitation

1 matching story

CVSS 9.1
  • Vulnerability Disclosure18d ago·2 sources

    Red Hat Keycloak Critical Flaw Lets Unauthenticated Attackers Reset Any Account Password

    Red Hat disclosed a critical vulnerability in Keycloak's reset-credentials flow that allows a remote unauthenticated attacker to bypass the email verification step and reset the password for any user account in any realm.

    KeycloakRed HatCVE-2026-18963+3
    Red Hat Keycloak Critical Flaw Lets Unauthenticated Attackers Reset Any Account Password