What is CVE-2026-15561?

CVE-2026-15561 is a high-severity vulnerability in Red Hat Jboss Enterprise Application Platform 7, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-08-11.

How severe is CVE-2026-15561?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Red Hat Jboss Enterprise Application Platform 7

CVE-2026-15561

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the l…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
RHBZ#2483133 (x_refsource_REDHAT, issue-tracking)

Frequently asked questions

What is CVE-2026-15561?: CVE-2026-15561 is a high-severity vulnerability in Red Hat Jboss Enterprise Application Platform 7, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-08-11.
How severe is CVE-2026-15561?: High severity. CVSS v3 base score is 7.5 out of 10.