HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-15563 — A flaw was found in EAP's IIOP. The listener's NameService would accept bind ope...

·Source: NIST NVD

Updated:

Executive Summary

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations.

Analysis

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations. CVSS Score: 7.4. Published: 2026-08-11T09:17:13.233.

Indicators of Compromise (1)

CVE (1)
CVE-2026-15563
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

HIGHVulnerabilityNEW

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

CVE-2025-62593Ray-Project Ray
CISA KEV
MEDIUMVulnerability

Irregular faces criticism over ‘spin’ in AI hacking postmortem

The company at the center of a series of incidents in which AI models compromised real-world computer systems during security evaluations is facing criticism after the release of a report that security experts say leaves key questions unanswered.

The Record
MEDIUMVulnerability

Poland probes MyDr healthcare software breach potentially affecting 19 million people

MyDr, a privately-owned Polish company that supplies software to doctors, clinics and other healthcare providers, said on Friday that it had identified and removed the cause of the incident and introduced additional security measures.

The Record