Is CVE-2026-15562 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15562?

CVE-2026-15562 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-15562

Description

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.