CVE-2026-24329

MEDIUM

Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-24329 has a selected CVSS score of 4.9 (medium).

Description

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml configuration file. Manual intervention is required to restore server operation, leading to a denial of service.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 12, 2026 · Source: CVE List

Affected products and versions

6
ProductSourceVersion range

Red Hat Fuse 7

Browse Red Hat / Red Hat Fuse 7wildfly-core-security

Default status: affected

CVE ListVersion data not supplied

Red Hat JBoss Enterprise Application Platform 7

Browse Red Hat / Red Hat JBoss Enterprise Application Platform 7wildfly-core-security

Default status: affected

CVE ListVersion data not supplied

Red Hat JBoss Enterprise Application Platform 8

Browse Red Hat / Red Hat JBoss Enterprise Application Platform 8wildfly-core-security

Default status: affected

CVE ListVersion data not supplied

Red Hat JBoss Enterprise Application Platform Expansion Pack

Browse Red Hat / Red Hat JBoss Enterprise Application Platform Expansion Packwildfly-core-security

Default status: affected

CVE ListVersion data not supplied

Red Hat Process Automation 7

Browse Red Hat / Red Hat Process Automation 7wildfly-core-security

Default status: affected

CVE ListVersion data not supplied

Red Hat Single Sign-On 7

Browse Red Hat / Red Hat Single Sign-On 7wildfly-core-security

Default status: affected

CVE ListVersion data not supplied

References

3