CVE-2026-24329
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A flaw in wildfly-core allows a remote user with administrative privileges to inject a malformed payload into the Inet Address field through the Management Model. This causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml configuration file.
Risk Assessment
The attack leads to denial of service, and recovery requires manual intervention, potentially causing prolonged service unavailability.
Recommendation
Restrict access to administrative accounts and apply vendor patches that validate input in the Management Model.
Original NVD description (English source)
A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml configuration file. Manual intervention is required to restore server operation, leading to a denial of service.