wildfly-ejb3 vulnerabilities

CVEs whose affected-version data names the wildfly-ejb3 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15564High· 7.4

4d ago

Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if …

▾ TwilightRed Hat · wildfly-ejb3EPSS 0.12%via CVEORG