ZeroDay Findings
Sign inSign up

Findings

CVE-2026-15567

A flaw was found in Wildfly.

Published Aug 11, 2026 · updated Oct 15, 2026

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 11, 2026 · NIST NVD

    Detected

    A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.

  2. Oct 15, 2026 · NIST NVD

    Updated

    A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.

Sources

  • CVE.orgVulnerability recordCVE-2026-15567

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-15567

    A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.

    nvd.nist.gov

References

CVE-2026-15567 · ZeroDay Findings