CVE-2026-15562: Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service
Published Aug 11, 2026
·Updated
A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.
Affected Software
1 affected component
JBoss jboss-remoting
Event History
Aug 11, 2026
CVE Published
via MITRE·08:49 AM
Data Sourced
via MITRE·08:49 AM
DescriptionSeverityWeakness