Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-84725— Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap

Quick assessment

Affected
Red Hat Red Hat JBoss Enterprise Application Platform 7
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

当 EAP 以 模式运行时，openjdk-orb 的 JDKBridge 在端口 3528 上进行对象反序列化时，会接受攻击者提供的 CDR 代码库 URL。这使得未认证的攻击者能够在 EJB 安全拦截器执行之前，从远程 URL 加载并实例化任意类到服务器 JVM 中。

CVSS 8.1 · High

Affected Version Matrix 2

VendorProduct Version RangeStatus
Red Hat Red Hat JBoss Enterprise Application Platform 7 any affected
Red Hat Red Hat JBoss Enterprise Application Platform 8 any affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-84725

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap
Source: CVE Program / CVE List V5
Vulnerability Description
when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
从非可信控制范围包含功能例程
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat JBoss Enterprise Application Platform 7 - cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat Red Hat JBoss Enterprise Application Platform 8 - cpe:/a:redhat:jboss_enterprise_application_platform:8

II. Public POCs for CVE-2026-84725

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-84725

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-84725 (1)

Same Patch Batch · Red Hat · 2026-10-28 · 3 CVEs total

CVE-2026-117574 9.1 CRITICAL Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection
CVE-2026-13451 7.7 HIGH Kserve: kserve: server-side request forgery via malicious storageuri

IV. Related Vulnerabilities

Same product: Red Hat JBoss Enterprise Application Platform 7
Same vendor: Red Hat
Same weakness: CWE-829