Description
A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml configuration file. Manual intervention is required to restore server operation, leading to a denial of service.
Published: 2026-08-11
Score: 4.9 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in WildFly core allows an authenticated administrative user to inject an improperly formatted payload into the Inet Address field via the Management Model, resulting in a server crash that is unrecoverable. The injected payload is written into the standalone.xml configuration file, forcing manual intervention to restore operation and causing a denial of service.

Affected Systems

Affected vendors include Red Hat; products impacted are Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7 and 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Process Automation 7, and Red Hat Single Sign‑On 7. Specific version ranges are not listed in the advisory.

Risk and Exploitability

The CVSS score of 4.9 indicates moderate severity; the EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires authenticating with administrative privileges to the WildFly management interface, likely through the web console or CLI. The attack vector is therefore an authenticated internal user or a compromised admin credential and leads to an unrecoverable denial of service.

Generated by OpenCVE AI on August 11, 2026 at 04:20 UTC.

Remediation

Vendor Workaround

Restrict network access to the WildFly management interface to trusted hosts only. Configure firewall rules to limit inbound connections to the management port (e.g., 9990) from only authorized IP addresses or subnets. Additionally, ensure that only necessary and trusted administrative users have credentials for the WildFly management console. Example firewall rule using `firewalld` on Red Hat Enterprise Linux: `firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="<TRUSTED_IP_ADDRESS>" port port="9990" protocol="tcp" accept'` `firewall-cmd --reload` This mitigation limits the attack surface by restricting who can access the administrative interface, thereby reducing the risk of an authenticated administrative user exploiting this vulnerability. Note that applying firewall rules may impact legitimate remote management operations if not configured correctly.

OpenCVE Recommended Actions

  • Configure firewall rules to allow management port 9990 only from trusted IP addresses or subnets, limiting access to the WildFly management interface.
  • Ensure that only necessary and trusted administrative users possess credentials for the WildFly management console.
  • Monitor system logs for unexpected crashes and verify the integrity of the standalone.xml configuration file after any unauthorized modifications.

Generated by OpenCVE AI on August 11, 2026 at 04:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 11 Aug 2026 03:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml configuration file. Manual intervention is required to restore server operation, leading to a denial of service.
Title Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.
First Time appeared Redhat
Redhat jboss Enterprise Application Platform
Redhat jboss Enterprise Bpms Platform
Redhat jboss Fuse
Redhat jbosseapxp
Redhat red Hat Single Sign On
Weaknesses CWE-91
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7
cpe:/a:redhat:jboss_enterprise_application_platform:8
cpe:/a:redhat:jboss_enterprise_bpms_platform:7
cpe:/a:redhat:jboss_fuse:7
cpe:/a:redhat:jbosseapxp
cpe:/a:redhat:red_hat_single_sign_on:7
Vendors & Products Redhat
Redhat jboss Enterprise Application Platform
Redhat jboss Enterprise Bpms Platform
Redhat jboss Fuse
Redhat jbosseapxp
Redhat red Hat Single Sign On
References
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Redhat Jboss Enterprise Application Platform Jboss Enterprise Bpms Platform Jboss Fuse Jbosseapxp Red Hat Single Sign On
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-08-11T02:35:22.536Z

Reserved: 2026-01-22T03:12:39.123Z

Link: CVE-2026-24329

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-11T04:30:03Z

Weaknesses
  • CWE-91

    XML Injection (aka Blind XPath Injection)