wildfly-ee-dist vulnerabilities

CVEs whose affected-version data names the wildfly-ee-dist package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114488High· 7.4

5d ago

Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding

A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level auth…

▾ TwilightRed Hat · wildfly-iiop-openjdkEPSS 0.34%via CVEORG