{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"26.5.3"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2026-2733"],"ecosystem":"Maven","epss":0.00371,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fjf4-6f34-w64q","id":"tcs_01M5N8W5P2X5FW6V63YTF4JG3K","modified_at":"2026-09-10T03:50:34.968469909Z","published_at":"2026-02-19T18:31:51Z","references":["https://osv.dev/vulnerability/GHSA-fjf4-6f34-w64q","https://nvd.nist.gov/vuln/detail/CVE-2026-2733","https://github.com/keycloak/keycloak/issues/46462","https://github.com/keycloak/keycloak/commit/743ac24081b2c6da36aac3775147ec5b80c2861e","https://access.redhat.com/errata/RHSA-2026:3947","https://access.redhat.com/errata/RHSA-2026:3948","https://access.redhat.com/security/cve/CVE-2026-2733","https://bugzilla.redhat.com/show_bug.cgi?id=2440895","https://github.com/keycloak/keycloak"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-fjf4-6f34-w64q","url":"https://osv.dev/vulnerability/GHSA-fjf4-6f34-w64q"}],"summary":"Keycloak: Missing Check on Disabled Client for Docker Registry Protocol"}