EUVD-2026-102546

A flaw was found in WildFly. A user with the Monitor role, which is the lowest standard Role-Based Access Control RBAC role, can exploit a path traversal vulnerability in the take-snapshot operation. By manipulating the name parameter, this user can write a copy of the server configuration to an...

CVE-2026-84823

A flaw was found in WildFly. A user with the Monitor role, which is the lowest standard Role-Based Access Control RBAC role, can exploit a path traversal vulnerability in the take-snapshot operation. By manipulating the name parameter, this user can write a copy of the server configuration to an...

CVE-2026-84823

A path traversal vulnerability exists in WildFly within the take-snapshot operation. An attacker with the lowest standard Monitor role can manipulate the name parameter to write a copy of the server configuration to an arbitrary location. This allows the user to read sensitive credentials and oth...

CVE-2026-84823 Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role

A flaw was found in WildFly. A user with the Monitor role, which is the lowest standard Role-Based Access Control RBAC role, can exploit a path traversal vulnerability in the take-snapshot operation. By manipulating the name parameter, this user can write a copy of the server configuration to an...

CVE-2026-84823

A flaw was found in WildFly. A user with the Monitor role, which is the lowest standard Role-Based Access Control RBAC role, can exploit a path traversal vulnerability in the take-snapshot operation. By manipulating the name parameter, this user can write a copy of the server configuration to an...