CVE-2026-15564
7.4 HIGHPublished 2026-10-29 · Updated 2026-10-29
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if the target EJB allows untyped method parameters, and depending on the potential gadget chains available in the running classpath.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-829
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100256
- CRITICALCVE-2026-104056
- UNSCOREDCVE-2026-104809
- UNSCOREDCVE-2026-104811
- CRITICALCVE-2026-105080PoC
- UNSCOREDCVE-2026-105331
- HIGHCVE-2026-105677PoC
- MEDIUMCVE-2026-105745PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.