Threats Tagged 'cve-2026-15562'

Red Hat JBoss Enterprise Application Platform 8.1.8 includes multiple security fixes addressing vulnerabilities such as denial of service, privilege escalation, authentication bypass, information disclosure, and remote code execution. These issues affect various components including jackson-core, Netty, Bouncy Castle, jackson-databind, Undertow, Artemis, WildFly Elytron, Apache CXF, and others. The update replaces version 8.1.7 and is rated as having an important security impact. Users are advised to apply the update following Red Hat's guidance.

Red Hat JBoss Enterprise Application Platform 8.1.8 includes multiple security fixes addressing a range of vulnerabilities such as denial of service, privilege escalation, authentication bypass, information disclosure, and remote code execution. These vulnerabilities affect components like jackson-core, Netty, Bouncy Castle, jackson-databind, Undertow, Artemis, Apache CXF, WildFly Elytron, and others. The update replaces version 8.1.7 and is intended to mitigate these issues in the platform based on WildFly runtime.

Red Hat JBoss Enterprise Application Platform 8.1.8 includes multiple security fixes addressing vulnerabilities such as denial of service, privilege escalation, authentication bypass, information disclosure, and remote code execution. These issues affect various components including Jackson libraries, Netty codecs, Bouncy Castle, Undertow, Apache CXF, Artemis server, WildFly Elytron, and others. The update replaces version 8.1.7 and is intended to mitigate these security risks.

CVE-2026-15562 is a denial of service vulnerability in Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7. It involves an integer overflow or wraparound flaw in the jboss-remoting component. A remote unauthenticated attacker able to reach specific ports and complete a jboss-remoting handshake can cause out-of-memory errors that degrade server-wide request handling.

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.