JBoss EAP IIOP NS Auth Bypass: Unauthenticated Bind Hijacks JNDI
CVE-2026-15563 Published on August 11, 2026
Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos
A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations.
Vulnerability Analysis
CVE-2026-15563 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Timeline
Reported to Red Hat.
Made public. 74 days later.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2026-15563
Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.
Affected Versions
Red Hat JBoss Enterprise Application Platform 7.4.25: Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:- Version 0:2.16.0-22.redhat_00057.1.el7eap and below * is unaffected.
- Version 0:2.3.14-11.SP11_redhat_00001.1.el7eap and below * is unaffected.
- Version 0:1.5.26-2.Final_redhat_00001.1.el7eap and below * is unaffected.
- Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.
- Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.
- Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.
- Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.
- Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.
- Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.
- Version 0:5.0.31-3.SP2_redhat_00001.1.el7eap and below * is unaffected.
- Version 0:1.10.0-46.Final_redhat_00044.1.el7eap and below * is unaffected.
- Version 0:4.1.135-1.Final_redhat_00001.1.el7eap and below * is unaffected.
- Version 0:4.1.135-1.Final_redhat_00001.1.el7eap and below * is unaffected.
- Version 0:2.5.5-30.SP12_redhat_00020.1.el7eap and below * is unaffected.
- Version 0:2.5.5-24.SP12_redhat_00016.1.el7eap and below * is unaffected.
- Version 0:2.2.40-2.SP3_redhat_00001.1.el7eap and below * is unaffected.
- Version 0:7.4.25-2.GA_redhat_00001.1.el7eap and below * is unaffected.