CVE-2026-12977

A flaw exists in the deployment-operation family of WildFly Core due to missing sensitivity classification in certain handlers, specifically the upload-deployment-url endpoint. This vulnerability allows an administrator with the restricted Maintainer role to read sensitive configuration files. Su...

CVE-2026-12977 Org.wildfly.core/wildfly-server: wildfly: rbac bypass in wildfly deployment-operation handlers leads to privilege escalation

A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of...

PT-2026-141099

Name of the Vulnerable Software and Affected Versions WildFly Core affected versions not specified Description A flaw exists in the deployment-operation family where certain handlers, such as the 'upload-deployment-url' endpoint, lack proper sensitivity classification. This allows an administrato...