CVE-2026-9794

Published: May 28, 2026Modified: Jun 26, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with varying client IDs. By observing distinct faultstrings in the responses, the attacker can determine the client's protocol type, leading to information disclosure.

Affected (1)

Products: Redhat: Build Of Keycloak

1 product

Build Of Keycloak

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Build Of Keycloak	All versions

Related CWEs

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (6)

https://access.redhat.com/errata/RHSA-2026:25097

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:25098

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:30049

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:30050

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-9794

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2482461

Source: secalert@redhat.com

Issue TrackingVendor Advisory

Timeline

No history available yet.