Security Advisory

CVE-2026-15555

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-11 08:49:40

Last updated 2026-08-24 11:38:25

Assigner redhat

CVSS score 8.8

State PUBLISHED

Description

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.

← Browse all CVEs View on cve.org ↗