CVE-2026-12977

Name of the Vulnerable Software and Affected Versions WildFly Core (affected versions not specified)

Description A flaw exists in the deployment-operation family where certain handlers, such as the 'upload-deployment-url' endpoint, lack proper sensitivity classification. This allows an administrator with the restricted Maintainer role to read sensitive configuration files, potentially leading to the exfiltration of credentials and granting full SuperUser administrative control of the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.