HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-15555 — A flaw was found in JBoss marshalling. The Infinispan session replication path d...

·Source: NIST NVD

Updated:

Executive Summary

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.

Analysis

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node. CVSS Score: 8.8. Published: 2026-08-11T09:17:12.540.

Indicators of Compromise (1)

CVE (1)
CVE-2026-15555
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Stripe agrees $7bn takeover of AI firm OpenRouter - Bloomberg

Payments giant Stripe has struck a $7 billion deal to acquire AI gateway keeper OpenRouter, according to Bloomberg.

Finextra
MEDIUMVulnerability

Unleashing Hackers to Be the US Government's Bounty Hunters

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/unleashing-hackers-to-be-us-governments-bounty-hunters-image_small-9-a-32585.jpg" align=right hspace=4><b>Trump Presidential Memo a Risky Proposition for Corporations and the Internet</b><br>Even those who support a White House push to involve the private sector in offensive cyber operations against foreign online crime groups adm

Bank Info Security
HIGHVulnerability

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

CVE-2025-62593Ray-Project Ray
CISA KEV