Threats tagged 'bit-keycloak-2026-7307'

CVE-2026-7307 is a high severity vulnerability in Red Hat build of Keycloak 26.2.16 where a remote unauthenticated attacker can send specially crafted XML input to the SAML endpoint, causing high CPU usage and worker thread starvation. This results in a Denial of Service (DoS) condition, making the server unavailable. Red Hat has released security advisories and updated packages to address this issue. Users are advised to apply these updates to remediate the vulnerability.