CVE Listesine Dön
CVE-2026-18963Otomatik saldırıya uygun · CISA

Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

CVSS Skor

9.1

EPSS İhtimal

%3.2

Risk Skoru

0.3

Yayın

2 ay önce

Overview (Genel Bakış)Public Exploits (16)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
orevim/CVE-2026-18963-PoC
GitHub

Proof of concept and vulnerability checker for CVE-2026-18963, an unauthenticated account takeover in the Keycloak reset-credentials flow. Single-file Python, optional Playwright browser component.

Public PoCKaynak güncellemesi: 15.10.2026 20:51:57
G
hardeep-sudo/Keycloak-CVE-2026-18963-Exploit
GitHub

hardeep-sudo/Keycloak-CVE-2026-18963-Exploit

Public PoCKaynak güncellemesi: 08.10.2026 09:37:14
G
SonOfABot/-CVE-2026-18963-POC
GitHub

PoC for keycloak 1.26 vulnerability

Public PoCKaynak güncellemesi: 08.10.2026 09:07:05
G
EQSTLab/CVE-2026-18963
GitHub

Keycloak reset-credentials flow bypass

Public PoCKaynak güncellemesi: 12.10.2026 10:24:40
G
ivanesk315/CVE-2026-18963
GitHub

ivanesk315/CVE-2026-18963

Public PoCKaynak güncellemesi: 10.09.2026 07:14:41
G
0xlyvio/CVE-2026-18963-keycloak
GitHub

CVE-2026-18963 — Keycloak reset-credentials bypass -> Account Takeover

Public PoCKaynak güncellemesi: 15.09.2026 13:17:49
G
alt3kx/CVE-2026-18963
GitHub

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector

Public PoCKaynak güncellemesi: 09.09.2026 18:53:58
G
minh3102011/CVE-2026-18963_analyst
GitHub

minh3102011/CVE-2026-18963_analyst

Public PoCKaynak güncellemesi: 27.08.2026 03:00:25
G
prot0tw/Keycloak_CVE-2026-18963_PoC
GitHub

This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...). (★12)

Public PoCKaynak güncellemesi: 25.08.2026 18:47:23
G
Red-Darkin/CVE-2026-18963-keycloak
GitHub

CVE-2026-18963 (★11)

Public PoCKaynak güncellemesi: 26.08.2026 09:32:31
G
kyos-public/keycloak-cve-2026-18963-hunt
GitHub

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database (★7)

Public PoCKaynak güncellemesi: 24.08.2026 09:47:50
G
Snizi/CVE-2026-18963-Exploit
GitHub

Exploit for KeyCloak CVE-2026-18963 (★7)

Public PoCKaynak güncellemesi: 25.08.2026 07:02:32
G
BlackHatExploitation/Exploit-For-CVE-2026-18963
GitHub

Exploit for CVE-2026-18963 by BlackHatExploitation (★0)

Public PoCKaynak güncellemesi: 27.08.2026 18:18:42
G
gman0x00/keycloak-CVE-2026-18963
GitHub

PoC, Dockerfile playground and root cause from patch diff analysis. (★0)

Public PoCKaynak güncellemesi: 26.08.2026 00:27:37
G
debugactiveprocess/CVE-2026-18963
GitHub

Nuclei template to discover Keycloak reset-credentials endpoints related to CVE-2026-18963 exposure validation. (★0)

Public PoCKaynak güncellemesi: 26.08.2026 01:58:52
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18963.yaml
Nuclei

Nuclei: Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Exploit referansı

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-18963"