CVE-2026-7307

7.5 HIGH

A flaw was found in Keycloak

Published: 2026-05-19 · Last updated: 2026-06-03

Severity and scoring

CVSS: 7.5 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-1286

Affected products

Vendor	Product
redhat	build_of_keycloak

Description

A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service (DoS) where the server becomes unavailable.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-7307
[Vendor advisory]https://access.redhat.com/errata/RHSA-2026:19594
[Vendor advisory]https://access.redhat.com/errata/RHSA-2026:19595
[Vendor advisory]https://access.redhat.com/errata/RHSA-2026:19596
[Vendor advisory]https://access.redhat.com/errata/RHSA-2026:19597
[Vendor advisory]https://access.redhat.com/security/cve/CVE-2026-7307
[Vendor advisory]https://bugzilla.redhat.com/show_bug.cgi?id=2476526

Related CVEs

Same vendor

CVE-2026-1767 — A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component (5.6 MEDIUM)
CVE-2026-1766 — A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 com... (5.6 MEDIUM)
CVE-2026-11793 — A stack buffer overflow flaw was found in 389 Directory Server (4.9 MEDIUM)
CVE-2026-11790 — A flaw was found in 389 Directory Server (4.9 MEDIUM)
CVE-2026-11789 — A flaw was found in 389 Directory Server (4.9 MEDIUM)

Same CWE

CVE-2026-50131 — Fedify is a TypeScript library for building federated server apps powered by ActivityPub (8.6 HIGH)
CVE-2025-8873 — On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all... (7.5 HIGH)
CVE-2019-25720 — Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all softwa... (6.5 MEDIUM)
CVE-2021-4479 — Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause... (4.0 MEDIUM)
CVE-2019-25723 — Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers ... (4.0 MEDIUM)