Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-17615— Resteasy-core: resteasy sourceprovider remote unauthenticated file read

Quick assessment

Affected
Red Hat Red Hat build of Apache Camel 4 for Quarkus 3
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

RESTEasy 的 SourceProvider 组件中存在一个缺陷。该漏洞允许未认证的攻击者执行未认证的远程文件读取。具体而言，当攻击者向一个接受 并返回 或 的端点发送一个经过精心构造的 XML 请求体，其中包含一个引用外部实体的 DOCTYPE 声明时，服务器会被诱导解析该实体，并将敏感文件内容包含在 HTTP 响应中。其根本原因在于 方法在创建 SAXParser 时未禁用外部实体解析，从而导致了 XML 外部实体（XXE）漏洞。

CVSS 7.5 · High

Affected Version Matrix 16

VendorProduct Version RangeStatus
Red Hat Red Hat build of Apache Camel 4 for Quarkus 3 any affected
Red Hat Red Hat build of Apicurio Registry 3 any affected
Red Hat Red Hat build of Debezium 3 any affected
Red Hat Red Hat Build of Keycloak any affected
any affected
any affected
any affected
any affected
Red Hat Red Hat build of Quarkus any affected
Red Hat Red Hat Enterprise Linux 8 any affected
any affected
Red Hat Red Hat Enterprise Linux 9 any affected
Red Hat Red Hat Fuse 7 any affected
Red Hat Red Hat JBoss Enterprise Application Platform 8 any affected
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack any affected
Red Hat Red Hat Satellite 6 any affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-17615

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Resteasy-core: resteasy sourceprovider remote unauthenticated file read
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and returns Source or StreamSource, the server can be tricked into resolving the entity and including sensitive file contents in the HTTP response. This is due to the SourceProvider.writeTo() method creating a SAXParser without disabling external entity resolution, leading to an XML External Entity (XXE) vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat build of Apache Camel 4 for Quarkus 3 - cpe:/a:redhat:camel_quarkus:3
Red Hat Red Hat build of Apicurio Registry 3 - cpe:/a:redhat:apicurio_registry:3
Red Hat Red Hat build of Debezium 3 - cpe:/a:redhat:debezium:3
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat build of Quarkus - cpe:/a:redhat:quarkus:3
Red Hat Red Hat Enterprise Linux 8 - cpe:/o:redhat:enterprise_linux:8
Red Hat Red Hat Enterprise Linux 8 - cpe:/o:redhat:enterprise_linux:8
Red Hat Red Hat Enterprise Linux 9 - cpe:/o:redhat:enterprise_linux:9
Red Hat Red Hat Fuse 7 - cpe:/a:redhat:jboss_fuse:7
Red Hat Red Hat JBoss Enterprise Application Platform 8 - cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack - cpe:/a:redhat:jbosseapxp
Red Hat Red Hat Satellite 6 - cpe:/a:redhat:satellite:6

II. Public POCs for CVE-2026-17615

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-17615

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-17615 (1)

Other References for CVE-2026-17615 (1)

Same Patch Batch · Red Hat · 2026-08-31 · 6 CVEs total

CVE-2026-83596 8.8 HIGH Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
CVE-2026-12894 8.8 HIGH Quarkus-qute: io.quarkus.qute.reflectionvalueresolver: quarkus:server-side template inject
CVE-2026-13732 7.8 HIGH Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf
CVE-2026-76763 7.5 HIGH Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via larg
CVE-2026-81624 7.5 HIGH Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite

IV. Related Vulnerabilities

Same product: Red Hat build of Apache Camel 4 for Quarkus 3
Same vendor: Red Hat
Same weakness: CWE-611

V. Comments for CVE-2026-17615

No comments yet

Leave a comment