https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:40:30.809015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-355272 EUVD-2026-355272 2026-10-03T10:40:30.947166+00:00 EUVD-2026-355272 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2251 fkie_cve-2025-2251 2026-10-03T10:40:30.947229+00:00

A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.

 https://cve.radiocsirt.org/vuln/ghsa-6839-6896-r9mx GHSA-6839-6896-r9mx 2026-10-03T10:40:30.947273+00:00

A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.

 https://cve.radiocsirt.org/vuln/rhsa-2025:10452 RHSA-2025:10452 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update 2026-10-03T10:40:30.947293+00:00

org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files base-x: base-x homograph attack allows Unicode lookalike characters to bypass validation. commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0729 WID-SEC-W-2025-0729 — Red Hat JBoss Enterprise Application Platform und WildFly: Schwachstelle ermöglicht Codeausführung 2026-10-03T10:40:30.947323+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform und WildFly ausnutzen, um beliebigen Programmcode auszuführen.