High severity7.4NVD Advisory· Published Aug 11, 2026· Updated Sep 25, 2026
CVE-2026-15563
CVE-2026-15563
Description
A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
10- access.redhat.com/errata/RHSA-2026:53644nvd
- access.redhat.com/errata/RHSA-2026:53645nvd
- access.redhat.com/errata/RHSA-2026:53646nvd
- access.redhat.com/errata/RHSA-2026:53806nvd
- access.redhat.com/errata/RHSA-2026:70228nvd
- access.redhat.com/errata/RHSA-2026:70229nvd
- access.redhat.com/errata/RHSA-2026:70230nvd
- access.redhat.com/errata/RHSA-2026:70277nvd
- access.redhat.com/security/cve/CVE-2026-15563nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.