Keycloak release 26.7.2 contains fixes for several vulnerabilities
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-45292, CVE-2026-14613, CVE-2026-59888, CVE-2026-59889, CVE-2026-15945, CVE-2026-17048, CVE-2026-15571, CVE-2026-18963, Summary: This includes a fix for CVE-2026-18963 rated critical, which allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control…
EPSS 0.01 CVSS 9.1 CVE-2026-14613 CVE-2026-15571 CVE-2026-15945 CVE-2026-17048 CVE-2026-18963 CVE-2026-45292 CVE-2026-59888 CVE-2026-59889 Keycloak FI