Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
Summary
| CVE | CVE-2026-15555 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-08-11 09:17:12 UTC |
| Updated | 2026-10-20 15:17:22 UTC |
| Description | A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node. |
Risk And Classification
Primary CVSS: v3.1 8.8 HIGH from [email protected]
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.003190000 probability, percentile 0.234550000 (date 2026-10-20)
Problem Types: CWE-502 | CWE-502 Deserialization of Untrusted Data
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 8.8 | HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 8.8 | HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
AdjacentAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4.25 | Not specified | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4.25 | Not specified | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.16.0-22.redhat_00057.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.3.14-11.SP11_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:1.5.26-2.Final_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:5.0.31-3.SP2_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:1.10.0-46.Final_redhat_00044.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.5.5-30.SP12_redhat_00020.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.5.5-24.SP12_redhat_00016.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.2.40-2.SP3_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:7.4.25-2.GA_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.16.0-22.redhat_00057.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.3.14-11.SP11_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:1.5.26-2.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.18.8-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.18.8-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.18.8-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.18.8-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.18.8-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.18.8-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:5.0.31-3.SP2_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:1.10.0-46.Final_redhat_00044.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.5.5-30.SP12_redhat_00020.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.5.5-24.SP12_redhat_00016.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:2.2.40-1.SP3_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 8 | unaffected 0:7.4.25-2.GA_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.16.0-22.redhat_00057.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.3.14-11.SP11_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:1.5.26-2.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.18.8-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.18.8-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.18.8-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.18.8-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.18.8-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.18.8-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:5.0.31-3.SP2_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:1.10.0-46.Final_redhat_00044.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.5.5-30.SP12_redhat_00020.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.5.5-24.SP12_redhat_00016.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:2.2.40-1.SP3_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 9 | unaffected 0:7.4.25-2.GA_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1.8.GA | unaffected 5.0.13.Final-redhat-00001 * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.40.0-8.redhat_00024.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.7-1.SP1_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.0.5-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:1.85.0-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:1.2.7-1.redhat_00002.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:801.8.0-1.GA_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:6.6.54-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.5-5.redhat_00008.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.22-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.0.5-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.0.7-4.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.1.0-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.6.3-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:5.0.31-1.SP2_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.1.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.2.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:7.4.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.1-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:5.1.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.0.11-2.SP1_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.25.4-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.2.2-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:9.37.4-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:1.1.9-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.6-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.0.18-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.3.26-2.SP3_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:8.1.8-9.GA_redhat_00006.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.6.11-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:8.1.1-12.GA_redhat_00048.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.3.2-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.6-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.40.0-8.redhat_00024.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.7-1.SP1_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.0.5-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:1.85.0-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:1.2.7-1.redhat_00002.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:801.8.0-1.GA_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:6.6.54-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.5-5.redhat_00008.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.22-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.0.5-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.0.7-4.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.1.0-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.6.3-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:5.0.31-1.SP2_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.1.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.2.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:7.4.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.1-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:5.1.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.0.11-2.SP1_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.25.4-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.2.2-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:9.37.4-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:1.1.9-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.6-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.0.18-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.3.26-2.SP3_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:8.1.8-9.GA_redhat_00006.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.6.11-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:8.1.1-12.GA_redhat_00048.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.3.2-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.6-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.40.0-8.redhat_00024.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.7-1.SP1_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.0.5-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:1.85.0-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:1.2.7-1.redhat_00002.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:801.8.0-1.GA_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:6.6.54-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.5-5.redhat_00008.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.22-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.0.5-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.0.7-4.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.1.0-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.6.3-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:5.0.31-1.SP2_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.1.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.2.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:7.4.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.1-1.Final_redhat_00001.1el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:5.1.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.0.11-2.SP1_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.25.4-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.2.2-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:9.37.4-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:1.1.9-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.6-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.0.18-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.3.26-2.SP3_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:8.1.8-9.GA_redhat_00006.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.6.11-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:8.1.1-12.GA_redhat_00048.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.3.2-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.6-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | Not specified | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2026:70229 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70228 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70277 | [email protected] | access.redhat.com | |
| bugzilla.redhat.com/show_bug.cgi | [email protected] | bugzilla.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70230 | [email protected] | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2026-15555 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53806 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53645 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53644 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53646 | [email protected] | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2026-05-21T20:47:36.888Z | Reported to Red Hat. |
| CNA | 2026-08-11T05:49:54.473Z | Made public. |
Workarounds
CNA: To reduce the risk, enable the AUTH protocol in the JGroups protocol stack configuration of all clustered EAP instances so that only authenticated nodes can join the cluster, and restrict network access to the JGroups cluster traffic (bind port range and multicast/TCP discovery addresses) so that only trusted hosts can reach it. These measures prevent untrusted network-adjacent hosts from joining the cluster and injecting crafted serialized session data. The complete remediation is to install the updated packages as they become available through the product's update channels.
There are currently no legacy QID mappings associated with this CVE.