Exploit for CVE-2026-18963

githubexploit · 2026-09-05

Description

Keycloak reset-credentials bypass leading to account takeover via exploit.

CVSS 9.1 for CVE-2026-18963

9.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

Working code

38%confidence this exploit runs

Based on 2 file(s) in the source

CVE Information

Exploit Details

Modified:2026-09-05 20:53

Last Seen:2026-09-05 21:23

Reporter:0xlyvio

Tags

Keycloakreset-credentials bypassaccount takeoverCVE-2026-18963exploit

Other exploits for CVE-2026-18963

2026-09-04 KitPloitKITPLOIT

keycloak-CVE-2026-18963

2026-09-03 KitPloitKITPLOIT

Exploit-For-CVE-2026-18963

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

Keycloak_CVE-2026-18963_PoC

2026-09-03 KitPloitKITPLOIT

CVE-2026-18963_analyst

2026-09-01 KitPloitKITPLOIT

2026-09-01 KitPloitKITPLOIT

CVE-2026-18963-keycloak

2026-09-01 KitPloitKITPLOIT

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=88FAD2B1-66D0-5B36-903D-3E231116548C
# CVE-2026-18963-keycloak
CVE-2026-18963 — Keycloak reset-credentials bypass -> Account Takeover