Tag: CVE-2026-15571

Critical CVEs

Critical Keycloak Flaw CVE-2026-18963 Allows Unauthenticated Account Takeover

Red Hat and the Keycloak project have released patches for a critical vulnerability, CVE-2026-18963, that could let unauthenticated attackers take over any…

account takeover critical vulnerability CVE-2026-15571 CVE-2026-18963

August 24, 2026

Critical CVEs

CVE-2026-15571: Predictable Account-Linking Hash in Keycloak

A predictable account-linking hash in Keycloak could enable account takeover via a malicious OpenID Connect client. Fixed in version 26.7.2.

account takeover CVE-2026-15571 Keycloak OIDC

August 24, 2026