Critical Keycloak Flaw CVE-2026-18963 Allows Unauthenticated Account Takeover
Red Hat and the Keycloak project have released patches for a critical vulnerability, CVE-2026-18963, that could let unauthenticated attackers take over any…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-18963 — Vulnerability brief
CVE-2026-18963 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-15571: Predictable Account-Linking Hash in Keycloak
A predictable account-linking hash in Keycloak could enable account takeover via a malicious OpenID Connect client. Fixed in version 26.7.2.
CVE-2019-18935 — Vulnerability brief
CVE-2019-18935 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2021-29442 — Vulnerability brief
CVE-2021-29442 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2019-16098 — Vulnerability brief
CVE-2019-16098 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2021-21551 — Vulnerability brief
CVE-2021-21551 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit Ravie LakshmananAug 24, 2026Cybercrime / Malware Cybersecurity…
CVE-2021-3156 — Vulnerability brief
CVE-2021-3156 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2010-3904 — Vulnerability brief
CVE-2010-3904 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…