Red Hat Product Errata RHSA-2026:56520 - Security Advisory Issued: 2026-08-18 Updated: 2026-08-18 RHSA-2026:56520 - Security Advisory Overview Synopsis Critical: Red Hat build of Keycloak 26.4.15 Security Update Type/Severity Security Advisory: Critical Topic New Red Hat build of Keycloak 26.4.15 packages are available from the Customer Portal Description Red Hat build of Keycloak 26.4.15 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes: Unauthenticated account takeover via reset-credentials flow bypass (CVE-2026-18963) Solution Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. Affected Products Red Hat build of Keycloak Text-only Advisories x86_64 Fixes (none) CVEs CVE-2026-18963 References https://access.redhat.com/security/updates/classification/#critical The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .