Lucene search
+L

6 matches found

NVD
NVD
•added 2026/11/09 7:17 p.m.•6 views

CVE-2026-12977

A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of...

8.8CVSS0.00246EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/11/09 7:07 p.m.•6 views

CVE-2026-12977

A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of...

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References3
CVE
CVE
•added 2026/11/09 7:07 p.m.•18 views

CVE-2026-12977

A flaw exists in the deployment-operation family of WildFly Core due to missing sensitivity classification in certain handlers, specifically the upload-deployment-url endpoint. This vulnerability allows an administrator with the restricted Maintainer role to read sensitive configuration files. Su...

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/09 7:07 p.m.•10 views

CVE-2026-12977 Org.wildfly.core/wildfly-server: wildfly: rbac bypass in wildfly deployment-operation handlers leads to privilege escalation

A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of...

8.8CVSS0.00246EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/09 7:07 p.m.•6 views

EUVD-2026-120230

A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of...

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/09 12:00 a.m.•2 views

CVE-2026-12977: Red Hat: A flaw was found in the deployment-operation family of WildFly Core

A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of...

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References2
Rows per page
Query Builder