Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-15567— Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

Quick assessment

Affected
Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

wildfly是Wildfly基金会开源的一款功能强大、模块化且轻量级的应用程序服务器。 wildfly存在安全漏洞，该漏洞源于CSIv2Util的GSS令牌解码器在读取攻击者控制的长度字段时未进行边界检查，并尝试分配该大小的字节数组，可能导致远程未认证攻击者触发内存溢出错误，造成拒绝服务。

CVSS 7.5 · High EPSS 0.55% · P44

Affected Version Matrix 179

VendorProduct Version RangeStatus
Red Hat Red Hat Fuse 7 any unknown
Red Hat Red Hat JBoss Enterprise Application Platform 7 any affected
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.16.0-22.redhat_00057.1.el7eap< * unaffected
0:2.3.14-11.SP11_redhat_00001.1.el7eap< * unaffected
0:1.5.26-2.Final_redhat_00001.1.el7eap< * unaffected
0:2.18.8-1.redhat_00003.1.el7eap< * unaffected
0:2.18.8-1.redhat_00003.1.el7eap< * unaffected
0:2.18.8-1.redhat_00003.1.el7eap< * unaffected
0:2.18.8-1.redhat_00003.1.el7eap< * unaffected
0:2.18.8-1.redhat_00003.1.el7eap< * unaffected
… +9 more rows
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.16.0-22.redhat_00057.1.el8eap< * unaffected
0:2.3.14-11.SP11_redhat_00001.1.el8eap< * unaffected
0:1.5.26-2.Final_redhat_00001.1.el8eap< * unaffected
0:2.18.8-1.redhat_00003.1.el8eap< * unaffected
0:2.18.8-1.redhat_00003.1.el8eap< * unaffected
0:2.18.8-1.redhat_00003.1.el8eap< * unaffected
0:2.18.8-1.redhat_00003.1.el8eap< * unaffected
0:2.18.8-1.redhat_00003.1.el8eap< * unaffected
… +9 more rows
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9 0:2.16.0-22.redhat_00057.1.el9eap< * unaffected
0:2.3.14-11.SP11_redhat_00001.1.el9eap< * unaffected
0:1.5.26-2.Final_redhat_00001.1.el9eap< * unaffected
0:2.18.8-1.redhat_00003.1.el9eap< * unaffected
0:2.18.8-1.redhat_00003.1.el9eap< * unaffected
0:2.18.8-1.redhat_00003.1.el9eap< * unaffected
0:2.18.8-1.redhat_00003.1.el9eap< * unaffected
0:2.18.8-1.redhat_00003.1.el9eap< * unaffected
… +9 more rows
Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 7.4.25.GA-redhat-00001< * unaffected
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 0:2.40.0-8.redhat_00024.1.el10eap< * unaffected
0:4.1.7-1.SP1_redhat_00001.1.el10eap< * unaffected
0:2.0.5-1.Final_redhat_00001.1.el10eap< * unaffected
0:1.85.0-1.redhat_00001.1.el10eap< * unaffected
0:1.2.7-1.redhat_00002.1.el10eap< * unaffected
0:801.8.0-1.GA_redhat_00001.1.el10eap< * unaffected
0:6.6.54-1.Final_redhat_00001.1.el10eap< * unaffected
0:4.1.5-5.redhat_00008.1.el10eap< * unaffected
… +33 more rows
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 0:2.40.0-8.redhat_00024.1.el8eap< * unaffected
0:4.1.7-1.SP1_redhat_00001.1.el8eap< * unaffected
0:2.0.5-1.Final_redhat_00001.1.el8eap< * unaffected
0:1.85.0-1.redhat_00001.1.el8eap< * unaffected
0:1.2.7-1.redhat_00002.1.el8eap< * unaffected
0:801.8.0-1.GA_redhat_00001.1.el8eap< * unaffected
0:6.6.54-1.Final_redhat_00001.1.el8eap< * unaffected
0:4.1.5-5.redhat_00008.1.el8eap< * unaffected
… +33 more rows
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 0:2.40.0-8.redhat_00024.1.el9eap< * unaffected
0:4.1.7-1.SP1_redhat_00001.1.el9eap< * unaffected
0:2.0.5-1.Final_redhat_00001.1.el9eap< * unaffected
0:1.85.0-1.redhat_00001.1.el9eap< * unaffected
0:1.2.7-1.redhat_00002.1.el9eap< * unaffected
0:801.8.0-1.GA_redhat_00001.1.el9eap< * unaffected
0:6.6.54-1.Final_redhat_00001.1.el9eap< * unaffected
0:4.1.5-5.redhat_00008.1.el9eap< * unaffected
… +33 more rows
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack any unaffected
Red Hat Red Hat Single Sign-On 7 any unknown
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-15567

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
wildfly 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
wildfly是Wildfly基金会开源的一款功能强大、模块化且轻量级的应用程序服务器。 wildfly存在安全漏洞，该漏洞源于CSIv2Util的GSS令牌解码器在读取攻击者控制的长度字段时未进行边界检查，并尝试分配该大小的字节数组，可能导致远程未认证攻击者触发内存溢出错误，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 7.4.25.GA-redhat-00001 ~ * cpe:/a:redhat:jboss_enterprise_application_platform:7.4
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.16.0-22.redhat_00057.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.3.14-11.SP11_redhat_00001.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:1.5.26-2.Final_redhat_00001.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.18.8-1.redhat_00003.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.18.8-1.redhat_00003.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.18.8-1.redhat_00003.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.18.8-1.redhat_00003.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.18.8-1.redhat_00003.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.18.8-1.redhat_00003.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:5.0.31-3.SP2_redhat_00001.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:1.10.0-46.Final_redhat_00044.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:4.1.135-1.Final_redhat_00001.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:4.1.135-1.Final_redhat_00001.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.5.5-30.SP12_redhat_00020.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.5.5-24.SP12_redhat_00016.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:2.2.40-2.SP3_redhat_00001.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:7.4.25-2.GA_redhat_00001.1.el7eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.16.0-22.redhat_00057.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.3.14-11.SP11_redhat_00001.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:1.5.26-2.Final_redhat_00001.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.18.8-1.redhat_00003.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.18.8-1.redhat_00003.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.18.8-1.redhat_00003.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.18.8-1.redhat_00003.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.18.8-1.redhat_00003.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:2.18.8-1.redhat_00003.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:5.0.31-3.SP2_redhat_00001.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:1.10.0-46.Final_redhat_00044.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:4.1.135-1.Final_redhat_00001.1.el8eap ~ * cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8

II. Public POCs for CVE-2026-15567

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-15567

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-15567 (10)

Same Patch Batch · Red Hat · 2026-08-11 · 29 CVEs total

CVE-2026-10579 9.8 CRITICAL Picketlink-federation: auth bypass in picketlink saml unsolicited-response
CVE-2026-19546 8.8 HIGH Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced
CVE-2026-15555 8.8 HIGH Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization
CVE-2026-19550 8.2 HIGH Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad tru
CVE-2026-15556 8.1 HIGH Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions
CVE-2026-15560 8.1 HIGH Openjdk-orb: unauthed class loading via iiop in eap
CVE-2026-72693 7.8 HIGH Kbd: local privilege escalation in openvt via incorrect process owner verification allowin
CVE-2026-15565 7.5 HIGH Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serveren
CVE-2026-71467 7.5 HIGH Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated via upgrade: w
CVE-2026-71217 7.5 HIGH Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote de
CVE-2026-15562 7.5 HIGH Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authenticat
CVE-2026-15561 7.5 HIGH Undertow-core: oom via missing limits in chunked trailer in eap's undertow
CVE-2026-15554 7.4 HIGH Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery
CVE-2026-15563 7.4 HIGH Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or do
CVE-2026-50237 7.4 HIGH Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-
CVE-2026-50236 7.4 HIGH Openshift/console: authenticated ssrf with full response reflection and path neutralizatio
CVE-2026-72694 7.1 HIGH Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file p
CVE-2026-71474 7.1 HIGH Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-20
CVE-2026-71475 6.8 MEDIUM Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into
CVE-2026-24330 6.5 MEDIUM Wildfly-core: wildfly: arbitrary file read via malicious archive deployment

Showing top 20 of 29 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Red Hat JBoss Enterprise Application Platform 7.4.25
Same vendor: Red Hat

V. Comments for CVE-2026-15567

No comments yet

Leave a comment