https://cybercrime.club/tags/identity-provider/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usMon, 24 Aug 2026 23:10:42 -0400https://cybercrime.club/posts/keycloak-cve-2026-18963-reset-credentials-account-takeover/Mon, 24 Aug 2026 23:10:42 -0400https://cybercrime.club/posts/keycloak-cve-2026-18963-reset-credentials-account-takeover/CVE-2026-18963 lets an unauthenticated attacker skip email verification in Keycloak's password-reset flow and set new credentials on any account. Patch to 26.7.2 (or 26.4.15/26.6.6 for Red Hat builds) now.vulnerabilities