VulnSocial

CVE-2026-82965

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the SAML implementation of Keycloak, an open-source identity and access management solution. The SAML Artifact Resolution and ECP SOAP endpoints do not properly limit the size or complexity of incoming XML requests. An unauthenticated remote attacker can exploit this by sending specially crafted, large XML messages that cause the server to consume excessive memory. This leads to the application running out of memory and crashing, resulting in a denial of service for all users.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-08: 111-08
Referenced assets1 URL
By indicator
Full discourse1 post
  • ZeroPath Labs@ZeroPathLabs

    Keycloak SAML SOAP Endpoint DoS: CVE-2026-82965 A memory exhaustion flaw in Keycloak’s SAML SOAP endpoint can lead to denial of service. Patch asap to keep your auth stack resilient. For more details, read ZeroPath’s blog on this vuln. #AppSec #InfoSec https://zeropath.com/blog/keycloak-saml-soap-dos-cve-2026-82965

    0000018
    87 followersView on X

Explore more

Back to dashboard