Keycloak 26.7.2 - Unauthenticated Account Takeover

Keycloak 26.7.2 - Unauthenticated Account Takeover

Published 20 Oct 2026Updated 20 Oct 202610 sources
CVSS 0.0 ✓ VERIFIED REFERENCE

What happened

A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.

Affected versions

Unknown product: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
Exploit-DB 52699Keycloak 26.7.2 - Unauthenticated Account TakeoverAbel Maldonado2026-10-21VerifiedCVE-Intel · Red-Darkin/CVE-2026-18963-keycloakCVE-2026-18963ExploitPython★ 16⑂ 3Code indexedUpdated 26 Aug 2026Red-Darkin2026-08-24CandidateCVE-Intel · Snizi/CVE-2026-18963-ExploitExploit for KeyCloak CVE-2026-18963BypassPython★ 24⑂ 6Code indexedUpdated 26 Aug 2026Tags: account-takeover, authentication-bypass, cve-2026-18963, exploit, keycloak, oauth2, penetration-testing, pocSnizi2026-08-20CandidateCVE-Intel · prot0tw/Keycloak_CVE-2026-18963_PoCThis repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...).PoCPython★ 13⑂ 0Code indexedUpdated 26 Aug 2026prot0tw2026-08-25CandidateCVE-Intel · T0w0T/POC-CVE-2026-18963PoCPython★ 2⑂ 0Code indexedUpdated 25 Aug 2026T0w0T2026-08-24CandidateCVE-Intel · debugactiveprocess/CVE-2026-18963Nuclei template to discover Keycloak reset-credentials endpoints related to CVE-2026-18963 exposure validation.Exploit★ 0⑂ 0Updated 25 Aug 2026debugactiveprocess2026-08-25CandidateCVE-Intel · gman0x00/keycloak-CVE-2026-18963PoC, Dockerfile playground and root cause from patch diff analysis.PoCPython★ 0⑂ 0Code indexedUpdated 25 Aug 2026gman0x002026-08-25CandidateCVE-Intel · kyos-public/keycloak-cve-2026-18963-huntHunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak databaseExploit★ 11⑂ 1Updated 25 Aug 2026Tags: cve, incident-response, keycloak, postgresql, securitykyos-public2026-08-20CandidateCVE-Intel · minh3102011/CVE-2026-18963_analystExploit★ 0⑂ 0Updated 24 Aug 2026minh31020112026-08-24Candidate