cve-2026-18963

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18963.json"
      }
    ],
    "title": "keycloak-services: keycloak-services: Unauthenticated account takeover via reset-credentials flow bypass",
    "tracking": {
      "current_release_date": "2026-08-20T22:25:54+00:00",
      "generator": {
        "date": "2026-08-20T22:25:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "CVE-2026-18963",
      "initial_release_date": "2026-08-17T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T00:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-20T18:59:38+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-08-20T22:25:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
                  "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jbosseapxp"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Single Sign-On 7",
                "product": {
                  "name": "Red Hat Single Sign-On 7",
                  "product_id": "red_hat_single_sign-on_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Single Sign-On 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.4.15",
                "product": {
                  "name": "Red Hat build of Keycloak 26.4.15",
                  "product_id": "Red Hat build of Keycloak 26.4.15",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.4",
                "product": {
                  "name": "Red Hat build of Keycloak 26.4",
                  "product_id": "9Base-RHBK-26.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.4::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.6",
                "product": {
                  "name": "Red Hat build of Keycloak 26.6",
                  "product_id": "9Base-RHBK-26.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.6::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.6.6",
                "product": {
                  "name": "Red Hat build of Keycloak 26.6.6",
                  "product_id": "Red Hat build of Keycloak 26.6.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Keycloak"
          },
          {
            "category": "product_version",
            "name": "keycloak-services",
            "product": {
              "name": "keycloak-services",
              "product_id": "keycloak-services",
              "product_identification_helper": {
                "purl": "pkg:maven/org.keycloak/keycloak-services@23.0.7"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-12"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.4.15-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.6.6-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-12"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-12"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-23"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-12"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "keycloak-services as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
          "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:keycloak-services"
        },
        "product_reference": "keycloak-services",
        "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "keycloak-services as a component of Red Hat Single Sign-On 7",
          "product_id": "red_hat_single_sign-on_7:keycloak-services"
        },
        "product_reference": "keycloak-services",
        "relates_to_product_reference": "red_hat_single_sign-on_7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "James Paremain"
          ]
        }
      ],
      "cve": "CVE-2026-18963",
      "cwe": {
        "id": "CWE-640",
        "name": "Weak Password Recovery Mechanism for Forgotten Password"
      },
      "discovery_date": "2026-07-31T15:46:15+00:00",
      "flags": [
        {
          "label": "component_not_present",
          "product_ids": [
            "red_hat_jboss_enterprise_application_platform_expansion_pack:keycloak-services"
          ]
        },
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "red_hat_single_sign-on_7:keycloak-services"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511595"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Unauthenticated account takeover via reset-credentials flow bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Critical, given that it can be exploited by an unauthenticated remote attacker without any user interaction. Successful exploitation allows an attacker to gain full access to any user account by bypassing the email verification step in the password recovery process. The vulnerability's root cause is improper state validation within the reset-credentials authentication flow.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
          "Red Hat build of Keycloak 26.4.15",
          "Red Hat build of Keycloak 26.6.6"
        ],
        "known_not_affected": [
          "red_hat_jboss_enterprise_application_platform_expansion_pack:keycloak-services",
          "red_hat_single_sign-on_7:keycloak-services"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18963"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511595",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511595"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18963",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18963"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18963",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18963"
        }
      ],
      "release_date": "2026-08-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T20:49:21+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:56519"
        },
        {
          "category": "vendor_fix",
          "date": "2026-08-18T20:44:39+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:56524"
        },
        {
          "category": "vendor_fix",
          "date": "2026-08-18T20:36:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "Red Hat build of Keycloak 26.4.15"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:56520"
        },
        {
          "category": "vendor_fix",
          "date": "2026-08-18T20:37:40+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "Red Hat build of Keycloak 26.6.6"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:56523"
        },
        {
          "category": "workaround",
          "details": "If an immediate upgrade is not possible, disabling the \"Forgot password\" functionality across all realms can be used as a temporary mitigation.\n\nIn the RHBK administration console, navigate to:\n\nRealm settings → Login → Forgot password → Off\n\nApply this setting to all realms.\n\nUpgrade to a fixed version as soon as possible.",
          "product_ids": [
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
            "Red Hat build of Keycloak 26.4.15",
            "Red Hat build of Keycloak 26.6.6"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
            "Red Hat build of Keycloak 26.4.15",
            "Red Hat build of Keycloak 26.6.6",
            "red_hat_jboss_enterprise_application_platform_expansion_pack:keycloak-services",
            "red_hat_single_sign-on_7:keycloak-services"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical",
          "product_ids": [
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:f4df815564fc6801b50dffbbd3e0a421dfd83841c83c22a8e09305eeffdaf687_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:32c3da0c9e63f7a86ae49255fbcf318406bb3e34ee07f1bae7e1dc01c6329efd_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:9b5001e9dde3cd87823988cafd809a5887b296c048e398171e28b1c256de1107_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b72782f1fbc44144e58f08884b5a6f9a3a49e32c1965a9ce3d01bd6f70e761f8_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:b80c873fd9fe1ec85cf4191714a6ea2ac80854b2bdc3781d15811d16692527a0_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:5ae22f5c60ebeab633caa0ac3e3540402e9d589409513c67c2b1dada998c178d_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:696cf024e6bb736260b7a2439cc9e7b3aa05024c8c493ae6e448b224718e464b_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:8918c47378bb686b0894188d6ad578e5ce469def4926c419194703237a2fee3d_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:faf3f6772c31b33f526887927505095a6dd5bd8e507c643ebcc64eea60be56eb_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:59dc8a796829d2ffd605425348c9801ae38823da3269006a1fcc7d013a41eb30_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:44d03f041fd1760001776e4e08d1f4716da4dd00d50476c91206b6db4934147d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:80434d4628a04d1c82ea21c0ed0b0e4122823686cab030afcd77ec485c5b7d18_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c1ce5e79c69440caa9ccc761167b068e259cd126dfbdde28e36ae590c2bf60f5_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:c32f09e3b7c212e7fd6b4a9b7b5857e4fd18d4416e5d256ca99299377edeb05e_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2bf0b7db309d716f5ced722869f59a7307aaff57e9c223a1e594145a560c8178_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:413763d73d26774b9278d71dd2eea226bedaeac307ee146736a7ffbf7f613f0d_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:9c2a11371c3edb48bb24413a0aa60ff01efcdd2c1af45b07905f216e4648675f_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:e5a8533ccec075ff65f3447fd186a14069452e4446331a8f95530a2a86cb52a7_s390x",
            "Red Hat build of Keycloak 26.4.15",
            "Red Hat build of Keycloak 26.6.6",
            "red_hat_jboss_enterprise_application_platform_expansion_pack:keycloak-services",
            "red_hat_single_sign-on_7:keycloak-services"
          ]
        }
      ],
      "title": "keycloak-services: keycloak-services: Unauthenticated account takeover via reset-credentials flow bypass"
    }
  ]
}