diff --git a/.forgejo/workflows/build_keycloak.yml b/.forgejo/workflows/build_keycloak.yml
index 74cc8b2..3b870ba 100644
--- a/.forgejo/workflows/build_keycloak.yml
+++ b/.forgejo/workflows/build_keycloak.yml
@@ -19,7 +19,7 @@ jobs:
       matrix:
         keycloak-version:
           # renovate: datasource=docker depName=quay.io/keycloak/keycloak
-          - 26.8.1
+          - 26.8.2
     steps:
       - name: Install required system packages
         run: apk add --no-cache nodejs
diff --git a/nextcloud/99-security-hardening.ini b/nextcloud/99-security-hardening.ini
index 90a4b57..80c7593 100644
--- a/nextcloud/99-security-hardening.ini
+++ b/nextcloud/99-security-hardening.ini
@@ -5,5 +5,12 @@
 ; vulnerability. It is disabled by default for maximum compatibility, but
 ; enabling it is encouraged.
 ; https://wiki.php.net/rfc/strict_sessions
-session.use_strict_mode = 1
+session.use_strict_mode = 1\
 
+; Enable upload progress tracking in $_SESSION
+; Default Value: On
+; Development Value: On
+; Production Value: On
+; https://php.net/session.upload-progress.enabled
+; Warum, siehe hier: https://www.php.net/archive/2026.php#2026-10-23-1
+session.upload_progress.enabled = Off