HIGHVulnerability
CVE-2026-7307
A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service (DoS) where the server becomes unavailable.
Properties
- severity
- HIGH
- score
- 7.5
- cve_id
- CVE-2026-7307
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- published_at
- 2026-05-19T12:16:19.423
- last_modified
- 2026-08-26T16:16:43.897
Related Entities (3)
HAS_WEAKNESS (1)
→[Weakness]Improper Validation of Syntactic Correctness of Input
DESCRIBED_BY (1)
→[Source]NVD
AFFECTS_PRODUCT (1)
→[Product]
Explore deeper with Ninja Signal's threat intelligence graph