CVEvulnerability
CVE-2026-9794
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-05-28
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-209
Description
A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with varying client IDs. By observing distinct faultstrings in the responses, the attacker can determine the client's protocol type, leading to information disclosure.
Affected configurations
• redhat build of keycloak
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- https://access.redhat.com/errata/RHSA-2026:25097 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:25098 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:30049 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:30050 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2026-9794 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2482461 Issue Tracking, Vendor Advisory