PT-2026-141756
CVE-2026-87756
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
(affected versions not specified)
Description
Internal system EJBs (Enterprise JavaBeans) used for remote deployment and configuration fail to enforce administrative role checks when the server operates with the default profile. A remote unauthenticated attacker with access to the remote EJB endpoint can deploy arbitrary applications and execute code. This issue specifically affects installations where system applications and a remote EJB endpoint are enabled.
Recommendations
Upgrade to version 10.3.0.
Upgrade to version 11.0.0-M2.
Found an issue in the description? Have something to add? Feel free to write us 👾