Skip to content

CVE record · 1 source

CVE-2026-15564

CVSS 7.4

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed.

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8
CVSS v3.1: 7.4 AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-829
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

17

CVE NVD 3d ago

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed.

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve…

CVSS 7.4 CVE-2026-15564 Red Hat