CVE-2026-24329

Name of the Vulnerable Software and Affected Versions wildfly-core (affected versions not specified)

Description An authenticated administrative user can inject a malformed payload into the Inet Address field via the Management Model. This action causes the server to crash and enter an unrecoverable state because the payload is written directly into the standalone.xml configuration file. Restoring server operation requires manual intervention, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.