Search

2 results for “security vulnerability”

News 24 Aug 2026

Keycloak CVE-2026-18963 Lets Unauthenticated Attackers Reset Any Account Password

Keycloak CVE-2026-18963 lets unauthenticated attackers reset any user's password without the email verification link. The flaw carries a 9.1 CVSS score and affects every deployment using the default password reset flow.

News 06 Aug 2026

Zapscape KVM Flaw Lets Guest VMs Seize Host Root via Shadow MMU Use-After-Free

Security researcher Hyunwoo Kim has disclosed Zapscape (CVE-2026-64561), a use-after-free vulnerability in the Linux kernel's KVM hypervisor that allows. Zapscape is the third entry in what Kim describes as a KVM escape trilogy, following.