{"action":"Upgrade org.keycloak:keycloak-services to 26.6.3 or later.","affected":[{"introduced":"0","last_affected":"26.4.7"},{"fixed":"26.6.3","introduced":"26.5.0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2026-9802"],"ecosystem":"Maven","epss":0.003,"exploited":false,"fixed_versions":["26.6.3"],"ghsa_id":"GHSA-v5g5-wwmp-jppw","id":"tcs_01M5N9D9WPE37DR7HKRZJSD511","modified_at":"2026-07-01T21:56:29.774108Z","published_at":"2026-05-28T06:31:10Z","references":["https://osv.dev/vulnerability/GHSA-v5g5-wwmp-jppw","https://nvd.nist.gov/vuln/detail/CVE-2026-9802","https://github.com/keycloak/keycloak/issues/49426","https://github.com/keycloak/keycloak/pull/49542","https://github.com/keycloak/keycloak/pull/49619","https://github.com/keycloak/keycloak/pull/49620","https://github.com/keycloak/keycloak/commit/165df48d3f0f42ede8e6082184892ca7cc703989","https://github.com/keycloak/keycloak/commit/3451217e3837ce5e8bbcac2773f0ac44830b95f1","https://github.com/keycloak/keycloak/commit/3fde018b98e2729a594a3ac7fc730fde31da2f07","https://access.redhat.com/errata/RHSA-2026:25097","https://access.redhat.com/errata/RHSA-2026:25098","https://access.redhat.com/errata/RHSA-2026:30049","https://access.redhat.com/errata/RHSA-2026:30050","https://access.redhat.com/security/cve/CVE-2026-9802","https://bugzilla.redhat.com/show_bug.cgi?id=2482467","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-v5g5-wwmp-jppw","url":"https://osv.dev/vulnerability/GHSA-v5g5-wwmp-jppw"}],"summary":"Keycloak has Insufficient Session Expiration"}