CVE-2026-54086

Name of the Vulnerable Software and Affected Versions SLE API for Java versions prior to 5.1.7

Description The ISP1 PDU handling path decodes a body length controlled by an attacker and allocates a byte array without an upper bound. Additionally, malformed or truncated input can cause reads to terminate unexpectedly. This allows an unauthenticated client of the SLE listening service to cause resource leakage, trigger exceptions, and lead to a denial of service.

Recommendations Update to version 5.1.7.