CyberRota Analysis
AI-GeneratedA vulnerability in Wildfly allows remote unauthenticated attackers to exploit the GSS token decoder in CSIv2Util, potentially leading to an OutOfMemoryError by manipulating the length field during byte array allocation. This can result in service disruption or denial of service. Organizations using Wildfly should prioritize addressing this issue to mitigate the risk of exploitation.
CVE
CVE-2026-15567
Severity
HIGH
CVSS
7.5
EPSS
0.44%
Original NVD Description
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.