Keycloak Password Reset Flaw Exposes Account Takeover Risk

Keycloak CVE-2026-18963 is a critical password-reset flow flaw that could let unauthenticated attackers take over accounts, including admins. Update upstream Keycloak to 26.7.2 or patched Red Hat builds.