CVE-2026-15562
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In EAP jboss-remoting, a remote unauthenticated attacker who can reach ports 8080, 9990, or 4447 and complete an 'Upgrade: jboss-remoting' handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.
Risk Assessment
Risk of server unavailability due to memory exhaustion, potentially affecting all applications running on the server.
Recommendation
Restrict network access to the affected ports and apply vendor patches to limit the impact of the handshake.
Original NVD description (English source)
A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.