Vulnerabilities

TI-2026-13103 CVE-2026-15567 · GHSA-h33j-vrhg-4q7j

Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

MEDIUM 41

A flaw was found in Wildfly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00888 Published 2026-08-11 Partial fix · 2.16.0-22.redhat_00057.1.el7eap, 2.3.14-11.SP11_redhat_00001.1.el7eap +109 CWE-789

TI-2026-13102 CVE-2026-15565 · GHSA-356w-cx4r-75hv

Buffer overflow in Red Hat JBoss Enterprise Application Platform 7.4.25

MEDIUM 41

A flaw was found in Undertow.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01017 Published 2026-08-11 Partial fix · 2.16.0-22.redhat_00057.1.el7eap, 2.3.14-11.SP11_redhat_00001.1.el7eap +109 CWE-120

TI-2026-13101 CVE-2026-15563 · GHSA-259j-555g-mwrr

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

LOW 36

A flaw was found in EAP's IIOP.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00663 Published 2026-08-11 Partial fix · 2.16.0-22.redhat_00057.1.el7eap, 2.3.14-11.SP11_redhat_00001.1.el7eap +113 CWE-306

Vulnerabilities

Filters

Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

Buffer overflow in Red Hat JBoss Enterprise Application Platform 7.4.25

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos