CVE-2026-18963 – Keycloak Reset-Credentials Bypass → Account Takeover | Dark Hacker News