![\"Minh](\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/08\/keycloak-inline.jpg\")
<\/p>\n
\u0110i\u1ec3m nguy hi\u1ec3m c\u1ee7a CVE-2026-18963<\/h2>\n
Trong k\u1ecbch b\u1ea3n b\u00ecnh th\u01b0\u1eddng, ng\u01b0\u1eddi d\u00f9ng y\u00eau c\u1ea7u kh\u00f4i ph\u1ee5c m\u1eadt kh\u1ea9u s\u1ebd ph\u1ea3i x\u00e1c nh\u1eadn qua li\u00ean k\u1ebft ho\u1eb7c token \u0111\u01b0\u1ee3c g\u1eedi t\u1edbi email. Red Hat cho bi\u1ebft l\u1ed7 h\u1ed5ng xu\u1ea5t ph\u00e1t t\u1eeb vi\u1ec7c x\u00e1c th\u1ef1c tr\u1ea1ng th\u00e1i kh\u00f4ng \u0111\u00fang trong lu\u1ed3ng kh\u00f4i ph\u1ee5c, khi\u1ebfn k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u01b0a phi\u00ean x\u00e1c th\u1ef1c \u0111i th\u1eb3ng t\u1edbi b\u01b0\u1edbc c\u1eadp nh\u1eadt m\u1eadt kh\u1ea9u m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5m v\u00e0o li\u00ean k\u1ebft x\u00e1c minh qua email.<\/p>\n
N\u1ebfu khai th\u00e1c th\u00e0nh c\u00f4ng, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u1eb7t m\u1eadt kh\u1ea9u m\u1edbi cho t\u00e0i kho\u1ea3n m\u1ee5c ti\u00eau v\u00e0 gi\u00e0nh quy\u1ec1n ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n. M\u1ee9c \u0111\u1ed9 r\u1ee7i ro \u0111\u1eb7c bi\u1ec7t cao v\u00ec Keycloak th\u01b0\u1eddng n\u1eb1m \u1edf trung t\u00e2m h\u1ec7 th\u1ed1ng \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n, qu\u1ea3n l\u00fd phi\u00ean, ph\u00e2n quy\u1ec1n v\u00e0 k\u1ebft n\u1ed1i t\u1edbi nhi\u1ec1u \u1ee9ng d\u1ee5ng n\u1ed9i b\u1ed9.<\/p>\n
Phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng v\u00e0 b\u1ea3n v\u00e1<\/h2>\n
Ng\u01b0\u1eddi d\u00f9ng Keycloak upstream \u0111\u01b0\u1ee3c khuy\u1ebfn ngh\u1ecb n\u00e2ng c\u1ea5p l\u00ean Keycloak 26.7.2<\/strong>, ph\u00e1t h\u00e0nh ng\u00e0y 19\/08\/2026. V\u1edbi Red Hat build of Keycloak, c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt li\u00ean quan \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh cho c\u00e1c nh\u00e1nh 26.4 v\u00e0 26.6, bao g\u1ed3m g\u00f3i operator bundle v\u00e0 container image t\u01b0\u01a1ng \u1ee9ng.<\/p>\n Red Hat c\u0169ng ph\u00e1t h\u00e0nh nhi\u1ec1u errata v\u00e0o ng\u00e0y 18\/08\/2026 cho c\u00e1c g\u00f3i m\u00e1y ch\u1ee7 \u0111\u1ed9c l\u1eadp v\u00e0 container image. T\u00ednh \u0111\u1ebfn ng\u00e0y 24\/08\/2026, ngu\u1ed3n tin cho bi\u1ebft ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng l\u1ed7 h\u1ed5ng b\u1ecb khai th\u00e1c trong th\u1ef1c t\u1ebf v\u00e0 ch\u01b0a ghi nh\u1eadn m\u00e3 khai th\u00e1c c\u00f4ng khai \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c minh.<\/p>\n V\u1edbi c\u00e1c m\u00f4i tr\u01b0\u1eddng ch\u01b0a th\u1ec3 c\u1eadp nh\u1eadt ngay, Red Hat khuy\u1ebfn ngh\u1ecb t\u1ea1m th\u1eddi t\u1eaft t\u00ednh n\u0103ng Forgot password<\/strong> tr\u00ean t\u1ea5t c\u1ea3 realm. Trong giao di\u1ec7n qu\u1ea3n tr\u1ecb Red Hat build of Keycloak, thi\u1ebft l\u1eadp n\u00e0y n\u1eb1m t\u1ea1i Realm settings<\/strong>, m\u1ee5c Login<\/strong>, sau \u0111\u00f3 chuy\u1ec3n Forgot password<\/strong> sang tr\u1ea1ng th\u00e1i t\u1eaft.<\/p>\n \u0110\u00e2y ch\u1ec9 l\u00e0 bi\u1ec7n ph\u00e1p gi\u1ea3m thi\u1ec3u t\u1ea1m th\u1eddi. C\u00e1c t\u1ed5 ch\u1ee9c v\u1eabn n\u00ean \u01b0u ti\u00ean n\u00e2ng c\u1ea5p l\u00ean phi\u00ean b\u1ea3n \u0111\u00e3 v\u00e1, r\u00e0 so\u00e1t c\u1ea5u h\u00ecnh realm, ki\u1ec3m tra nh\u1eadt k\u00fd y\u00eau c\u1ea7u kh\u00f4i ph\u1ee5c m\u1eadt kh\u1ea9u b\u1ea5t th\u01b0\u1eddng v\u00e0 \u0111\u00e1nh gi\u00e1 l\u1ea1i c\u00e1c t\u00e0i kho\u1ea3n c\u00f3 \u0111\u1eb7c quy\u1ec1n cao, \u0111\u1eb7c bi\u1ec7t l\u00e0 t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb.<\/p>\n Keycloak l\u00e0 th\u00e0nh ph\u1ea7n h\u1ea1 t\u1ea7ng c\u00f3 t\u00ednh ch\u1ea5t n\u1ec1n t\u1ea3ng. Khi m\u1ed9t l\u1ed7i trong quy tr\u00ecnh kh\u00f4i ph\u1ee5c m\u1eadt kh\u1ea9u c\u00f3 th\u1ec3 d\u1eabn t\u1edbi chi\u1ebfm quy\u1ec1n t\u00e0i kho\u1ea3n, t\u00e1c \u0111\u1ed9ng kh\u00f4ng ch\u1ec9 d\u1eebng \u1edf m\u00e1y ch\u1ee7 Keycloak m\u00e0 c\u00f2n lan sang c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 ph\u00eda sau l\u1edbp \u0111\u1ecbnh danh n\u00e0y.<\/p>\n \u0110\u1ed9i v\u1eadn h\u00e0nh n\u00ean ki\u1ec3m k\u00ea phi\u00ean b\u1ea3n Keycloak \u0111ang s\u1eed d\u1ee5ng, x\u00e1c \u0111\u1ecbnh realm n\u00e0o b\u1eadt ch\u1ee9c n\u0103ng qu\u00ean m\u1eadt kh\u1ea9u, ki\u1ec3m tra m\u1ee9c \u0111\u1ed9 ph\u1ee5 thu\u1ed9c c\u1ee7a c\u00e1c \u1ee9ng d\u1ee5ng n\u1ed9i b\u1ed9 v\u00e0o Keycloak v\u00e0 \u01b0u ti\u00ean v\u00e1 c\u00e1c m\u00f4i tr\u01b0\u1eddng c\u00f3 t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb ho\u1eb7c truy c\u1eadp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m. V\u1edbi h\u1ec7 th\u1ed1ng l\u1edbn, c\u1ea7n k\u1ebft h\u1ee3p n\u00e2ng c\u1ea5p ph\u1ea7n m\u1ec1m v\u1edbi gi\u00e1m s\u00e1t \u0111\u0103ng nh\u1eadp b\u1ea5t th\u01b0\u1eddng, c\u1ea3nh b\u00e1o thay \u0111\u1ed5i m\u1eadt kh\u1ea9u h\u00e0ng lo\u1ea1t v\u00e0 ch\u00ednh s\u00e1ch x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 cho t\u00e0i kho\u1ea3n quan tr\u1ecdng.<\/p>\n VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News v\u00e0 Red Hat<\/em><\/p>","protected":false},"excerpt":{"rendered":" L\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Keycloak, n\u1ec1n t\u1ea3ng qu\u1ea3n l\u00fd \u0111\u1ecbnh danh v\u00e0 truy c\u1eadp m\u00e3 ngu\u1ed3n m\u1edf \u0111\u01b0\u1ee3c nhi\u1ec1u t\u1ed5 ch\u1ee9c s\u1eed d\u1ee5ng, c\u00f3 th\u1ec3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng ch\u01b0a x\u00e1c th\u1ef1c chi\u1ebfm quy\u1ec1n t\u00e0i kho\u1ea3n b\u1eb1ng c\u00e1ch thao t\u00fang quy tr\u00ecnh \u0111\u1eb7t l\u1ea1i m\u1eadt kh\u1ea9u. Theo The Hacker News v\u00e0 advisory c\u1ee7a […]<\/p>\n","protected":false},"author":2,"featured_media":1968,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[691,46,686,692,690,685,34,688,687,689,114],"class_list":["post-1970","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-account-takeover","tag-an-ninh-mang","tag-cve-2026-18963","tag-iam-security","tag-identity-and-access-management","tag-keycloak","tag-lo-hong-bao-mat","tag-password-reset","tag-red-hat","tag-reset-credentials","tag-vncybers"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1970"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1970\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1968"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1970"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1970"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Bi\u1ec7n ph\u00e1p t\u1ea1m th\u1eddi khi ch\u01b0a th\u1ec3 n\u00e2ng c\u1ea5p<\/h2>\n
Khuy\u1ebfn ngh\u1ecb cho \u0111\u1ed9i v\u1eadn h\u00e0nh<\/h2>\n