{"id":5567,"date":"2026-09-04T18:47:55","date_gmt":"2026-09-04T10:47:55","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-15555"},"modified":"2026-09-04T18:47:55","modified_gmt":"2026-09-04T10:47:55","slug":"cve-2026-15555","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-15555","title":{"rendered":"CVE-2026-15555 [HIGH] &#8211; A flaw was found in JBoss marshalling. The Infinispan session replication path deserialize"},"content":{"rendered":"<p>A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering \u2014 enabling RCE via deserialization gadget chains on every cluster node.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering \u2014 enabling RCE <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-5567","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/5567","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5567"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5567"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5567"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}