{"action":"Upgrade org.keycloak:keycloak-services to 26.6.3 or later.","affected":[{"introduced":"0","last_affected":"26.4.7"},{"fixed":"26.6.3","introduced":"26.5.0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2026-9803"],"ecosystem":"Maven","epss":0.00417,"exploited":false,"fixed_versions":["26.6.3"],"ghsa_id":"GHSA-cpf7-j4cf-vqx4","id":"tcs_01M5N8SX72ZC2NY51SFD191NKP","modified_at":"2026-07-01T21:56:29.587435Z","published_at":"2026-05-28T06:31:10Z","references":["https://osv.dev/vulnerability/GHSA-cpf7-j4cf-vqx4","https://nvd.nist.gov/vuln/detail/CVE-2026-9803","https://github.com/keycloak/keycloak/issues/49433","https://github.com/keycloak/keycloak/pull/49500","https://github.com/keycloak/keycloak/pull/49617","https://github.com/keycloak/keycloak/pull/49618","https://github.com/keycloak/keycloak/commit/2b8692499e907e6205be0bd9c8a4da5d46f6ca30","https://github.com/keycloak/keycloak/commit/3fc06909cc93eb5c4739a712fa350de625812e04","https://github.com/keycloak/keycloak/commit/ef06df91d344c7e99fcb82987ef6adb854f30789","https://access.redhat.com/errata/RHSA-2026:25097","https://access.redhat.com/errata/RHSA-2026:25098","https://access.redhat.com/errata/RHSA-2026:30049","https://access.redhat.com/errata/RHSA-2026:30050","https://access.redhat.com/security/cve/CVE-2026-9803","https://bugzilla.redhat.com/show_bug.cgi?id=2482465","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-cpf7-j4cf-vqx4","url":"https://osv.dev/vulnerability/GHSA-cpf7-j4cf-vqx4"}],"summary":"Keycloak has an Out-of-bounds Read"}