CVE-2026-7307
Published: 19 May 2026
Summary
CVE-2026-7307 is a high-severity Improper Validation of Syntactic Correctness of Input (CWE-1286) vulnerability in Redhat Build Of Keycloak. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 49.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-30883
Vulnerability details
A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a…
more
Denial of Service (DoS) where the server becomes unavailable.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct match to application/system exploitation causing endpoint DoS via crafted SAML XML input leading to CPU exhaustion and thread starvation.
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.