Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-119542— Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror

Quick assessment

Affected
Red Hat Red Hat build of Apache Camel 4 for Quarkus 3
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Infinispan 的 Ickle 查询解析器中发现了一个漏洞。包含深度嵌套谓词的查询可能导致递归解析耗尽 Java 线程栈，进而引发无法捕获的 。拥有 权限且能够提交缓存查询的已认证用户可能触发此问题，进而影响系统的可用性。

CVSS 4.3 · Medium

Possible ATT&CK Techniques 1 AI

T1499.003 · Application Exhaustion Flood
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-119542

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursive parsing to exhaust the Java thread stack and throw an uncaught StackOverflowError. An authenticated user with BULK_READ permission who can submit a cache query may trigger the issue, potentially affecting availability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的递归
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat build of Apache Camel 4 for Quarkus 3 - cpe:/a:redhat:camel_quarkus:3
Red Hat Red Hat Data Grid 8 - cpe:/a:redhat:jboss_data_grid:8
Red Hat Red Hat Fuse 7 - cpe:/a:redhat:jboss_fuse:7
Red Hat Red Hat JBoss Enterprise Application Platform 8 - cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack - cpe:/a:redhat:jbosseapxp

II. Public POCs for CVE-2026-119542

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-119542

请登录查看更多情报信息。

Other References for CVE-2026-119542 (2)

Same Patch Batch · Red Hat · 2026-10-30 · 15 CVEs total

CVE-2026-119528 7.8 HIGH Gimp: gimp: stack buffer overflow in psd image resource header loader
CVE-2026-103963 7.5 HIGH Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows r
CVE-2026-115455 6.5 MEDIUM Gcc: stack overflow in std::bitset on libstdc++
CVE-2026-118952 6.5 MEDIUM Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization ru
CVE-2026-91920 6.5 MEDIUM Undertow: undertow: chunkreader message length permits chunk-size overflow
CVE-2026-114690 6.2 MEDIUM Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
CVE-2026-114691 5.9 MEDIUM Gcc: integer wrap in `std
CVE-2026-118593 5.9 MEDIUM Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-460
CVE-2026-110133 5.8 MEDIUM Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal int
CVE-2026-118959 5.4 MEDIUM Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter
CVE-2026-118947 4.3 MEDIUM Keycloak-services: keycloak-services: authorization bypass via uma resource registration i
CVE-2026-115456 3.7 LOW Gcc: out-of-bounds read in std::from_chars
CVE-2026-118475 3.6 LOW Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp
CVE-2026-112922 3.3 LOW Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of in

IV. Related Vulnerabilities

Same vendor: Red Hat
Same weakness: CWE-674