Denial of Service Vulnerability in JBoss Remoting by Red Hat

CVE-2026-15562

What is CVE-2026-15562?

A vulnerability exists in JBoss Remoting that allows a remote attacker to exploit it through the Upgrade handshake process on specific ports (8080, 9990, or 4447). Successful exploitation can lead to out-of-memory (OOM) errors that affect the server's ability to handle requests, ultimately resulting in a denial of service for legitimate users. It is crucial for system administrators to apply security patches and assess their configurations to prevent unauthorized access.

References