A Keycloak account takeover flaw, CVE-2026-18963, lets attackers reset any user's password with no email verification. Update to 26.7.2 now. Related Posts: EverShop CVE-2026-72843 Flaw Allows Unauthenticated Account Takeover CVE-2026-77806: SPIP Unauthenticated RCE Exploited in the Wild as Public Exploit Lands Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched The post CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak appeared first on Daily Cyb