CVE-2026-24330

Name of the Vulnerable Software and Affected Versions wildfly-core (affected versions not specified)

Description A flaw allows a remote attacker with 'deployer' account authentication to import and deploy a malicious archive file from an untrusted source. By leveraging WildFly libraries to create a Java project, the attacker can use an HTTP POST request to upload and deploy the archive, which may lead to further exploitation, including arbitrary file read vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.