430 matches found
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: akhq, apicurio-registry, wavefront-proxy, opensearch, apache-activemq-artemis, wildfly, management-api-for-apache-cassandra-5.0, tez, trino, druid, thingsboard, apache-pulsar, infinispan, zipkin, neo4j, keycloak...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: akhq, apicurio-registry, wavefront-proxy, opensearch, apache-activemq-artemis, wildfly, management-api-for-apache-cassandra-5.0, tez, trino, druid, thingsboard, apache-pulsar, infinispan, zipkin, neo4j, keycloak...
GHSA-QV9R-C865-CP47 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, celeborn, flink, druid, neo4j, kafka, akhq, opensearch, strimzi-kafka-operator, spark, apache-pulsar, infinispan, spdx-tools-java, wildfly, solr, thingsboard, apache-tika, keycloak-config-cli, zipkin...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, celeborn, flink, druid, neo4j, kafka, akhq, opensearch, strimzi-kafka-operator, spark, apache-pulsar, infinispan, spdx-tools-java, wildfly, solr, thingsboard, apache-tika, keycloak-config-cli, zipkin...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555 Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
EUVD-2026-55982
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555 Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
Technical details about CVE-2026-15555 are not publicly available in the provided documents. Monitor for updates on affected components, root cause specifics, vulnerable versions, and remediation guidance.
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
PT-2026-70089
Name of the Vulnerable Software and Affected Versions JBoss marshalling affected versions not specified Description A flaw exists in the Infinispan session replication path where replicated session data is deserialized using the JBoss Marshalling River unmarshaller without class filtering. This...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, infinispan, keycloak, dependency-track-apiserver, knative-kafka-broker-fips, nacos, kafka-bridge-fips, kafka-bridge, apicurio-registry-fips, hono, apache-nifi, dependency-track, camunda-zeebe, ontop, airbyte-server, ontop-fips, zipkin,...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, infinispan, zipkin, apache-nifi, dependency-track, dependency-track-apiserver, keycloak, camunda-zeebe, nacos-docker, airbyte-server-fips, keycloak-fips, apicurio-registry, nacos, apicurio-registry-fips, airbyte-server...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, infinispan, keycloak, dependency-track-apiserver, knative-kafka-broker-fips, nacos, kafka-bridge-fips, kafka-bridge, apicurio-registry-fips, hono, apache-nifi, dependency-track, camunda-zeebe, ontop, airbyte-server, ontop-fips, zipkin,...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, infinispan, zipkin, apache-nifi, dependency-track, dependency-track-apiserver, keycloak, camunda-zeebe, nacos-docker, airbyte-server-fips, keycloak-fips, apicurio-registry, nacos, apicurio-registry-fips, airbyte-server...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: apicurio-registry, dependency-track, infinispan, zipkin, keycloak...