High nvd · CVE-2026-15555

CVE-2026-15555: A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via

Published Aug 11, 2026 CVSS 8.8

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.

Remote Code Execution

Affected AI Products

replicate

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.