{"action":"Upgrade org.keycloak:keycloak-services to 26.6.3 or later.","affected":[{"introduced":"0","last_affected":"26.4.7"},{"fixed":"26.6.3","introduced":"26.5.0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2026-9794"],"ecosystem":"Maven","epss":0.00436,"exploited":false,"fixed_versions":["26.6.3"],"ghsa_id":"GHSA-fqjh-8322-vgrv","id":"tcs_01M5N8WKFK4XQ3R4JAGFBEKEPR","modified_at":"2026-07-01T21:41:29.227389Z","published_at":"2026-05-28T06:31:09Z","references":["https://osv.dev/vulnerability/GHSA-fqjh-8322-vgrv","https://nvd.nist.gov/vuln/detail/CVE-2026-9794","https://github.com/keycloak/keycloak/issues/49428","https://github.com/keycloak/keycloak/pull/49684","https://github.com/keycloak/keycloak/pull/49686","https://github.com/keycloak/keycloak/commit/05e98366773eec60878bb2a6d5da6bc7048ac3c8","https://github.com/keycloak/keycloak/commit/7750e3ff823d1da8580d42c51194feb2e933b87b","https://github.com/keycloak/keycloak/commit/dba79eb03fb9d634fda5e86e1613b8747f968518","https://access.redhat.com/errata/RHSA-2026:25097","https://access.redhat.com/errata/RHSA-2026:25098","https://access.redhat.com/errata/RHSA-2026:30049","https://access.redhat.com/errata/RHSA-2026:30050","https://access.redhat.com/security/cve/CVE-2026-9794","https://bugzilla.redhat.com/show_bug.cgi?id=2482461","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-fqjh-8322-vgrv","url":"https://osv.dev/vulnerability/GHSA-fqjh-8322-vgrv"}],"summary":"Keycloak Generates an Error Message Containing Sensitive Information"}