CVE-2026-40858

Reproducción de la deserialización insegura del repositorio de agregación remota camel-infinispan CVE-2026-40858 Este proyecto demuestra una vulnerabilidad de deserialización de Java en el componente camel-infinispan de Apache Camel, registrada como CVE-2026-40858. El repositorio de agregación...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-093035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093035 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-032351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032351 advisory. A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-093039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093039 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: guac, emissary, verticadb-operator, kubevela, kubernetes, infinispan-operator, jitsucom-bulker, juicefs-csi-driver, aws-node-termination-handler, rancher-telemetry, redis-operator, etcd, op-geth, amazon-cloudwatch-agent, cloudflared...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, thingsboard, trino, keycloak, celeborn, opensearch, flyway, wavefront-proxy, strimzi-kafka-operator, tez, infinispan, spark, neo4j, logstash, kserve-modelmesh, druid, akhq, zipkin, apicurio-registry, wildfly,...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, thingsboard, trino, keycloak, celeborn, opensearch, flyway, wavefront-proxy, strimzi-kafka-operator, tez, infinispan, spark, neo4j, logstash, kserve-modelmesh, druid, akhq, zipkin, apicurio-registry, wildfly,...

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: apache-pulsar, solr, thingsboard, sonarqube, celeborn, opensearch, flink, wavefront-proxy, strimzi-kafka-operator, apache-tika, infinispan, kafka, spark, neo4j, kserve-modelmesh, spdx-tools-java, druid, akhq, keycloak-config-cli, zipkin, wildfly, apache-activemq-arte...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: apache-pulsar, solr, thingsboard, sonarqube, celeborn, opensearch, flink, wavefront-proxy, strimzi-kafka-operator, apache-tika, infinispan, kafka, spark, neo4j, kserve-modelmesh, spdx-tools-java, druid, akhq, keycloak-config-cli, zipkin, wildfly, apache-activemq-arte...

jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

CVE-2026-15555

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

CVE-2026-15555

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

CVE-2026-15555 Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

CVE-2026-15555

Technical details about CVE-2026-15555 are not publicly available in the provided documents. Monitor for updates on affected components, root cause specifics, vulnerable versions, and remediation guidance.

EUVD-2026-55982

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

CVE-2026-15555 Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

CVE-2026-15555

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

PT-2026-70089

Name of the Vulnerable Software and Affected Versions JBoss marshalling affected versions not specified Description A flaw exists in the Infinispan session replication path where replicated session data is deserialized using the JBoss Marshalling River unmarshaller without class filtering. This...

CVE-2026-40984 vulnerabilities

Vulnerabilities for packages: airbyte-server-fips, hono, dependency-track-apiserver, keycloak, nacos, apicurio-registry, apicurio-registry-fips, ontop-fips, camunda-zeebe, ontop, keycloak-fips, kafka-bridge, knative-kafka-broker-fips, kafka-bridge-fips, airbyte-server, knative-kafka-broker,...

CVE-2026-40983 vulnerabilities

Vulnerabilities for packages: airbyte-server, dependency-track-apiserver, camunda-zeebe, airbyte-server-fips, apicurio-registry, apicurio-registry-fips, dependency-track, keycloak-fips, nacos-docker, zipkin, infinispan, request-9047-keycloak-fips, apache-nifi, keycloak, nacos...