CVE lookup

CVE-2026-18963

Pruva has a verified reproduction for CVE-2026-18963: Keycloak reset-credentials flow: unauthenticated account takeover (CWE-640). The canonical evidence record is REPRO-2026-00337.

REPRO

REPRO-2026-00337

Package

Unknown

Severity

CRITICAL

Status

published

Open verified reproduction Plain text for agents NVD source