Beveiligingsadvies

CVE-2026-15555

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-11 08:49:40
Laatst bijgewerkt 2026-08-24 11:38:25
Toegewezen door redhat
CVSS-score 8.8
Status PUBLISHED

Beschrijving

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.