Red Hat
CVE-2026-107123: A flaw was found in the SAML XML processing component of Keycloak, an open-source identity and access management solution. The issue occurs when the server pars
CVE-2026-107123 Nov 5, 2026 Source: Vendor
A flaw was found in the SAML XML processing component of Keycloak, an open-source identity and access management solution. The issue occurs when the server parses XML documents containing excessively long dateTime or duration values. Because these strings are not properly validated before processing, the XML parser consumes excessive CPU time. An unauthenticated remote attacker can exploit this by sending specially crafted SAML requests to the server, leading to high CPU utilization and a denial
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-107123
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
1 line
Showing 1–1 of 1 matching , clear filters
CVE-2026-107123
BR2026-0000-042625
unclaimed
Credited as Red Hat would like to thank Mohammed LACHHAB for reporting this issue