EJB Client Vulnerability in Apache Products

CVE-2026-87758

What is CVE-2026-87758?

This vulnerability arises from the remote EJB client failing to verify that the hostname of the server it connects to corresponds with the server's TLS certificate. As a result, an attacker with access to the network traffic between the EJB client and server can easily impersonate the server. This could lead to unauthorized access to sensitive information, including credentials and invocation data, exposing users to potential data leakage and manipulation risks. It is advised for users to upgrade to the latest versions to mitigate this risk.

References