CVE-2026-15563

Name of the Vulnerable Software and Affected Versions EAP (affected versions not specified)

Description A flaw exists in the IIOP (Internet Inter-ORB Protocol) of EAP. The listener's NameService accepts bind operations without requiring authentication. This allows an attacker to hijack JNDI (Java Naming and Directory Interface) lookups by binding them to a malicious ORB (Object Request Broker), which can lead to Man-in-the-Middle (MITM) attacks or Denial of Service (DoS) during subsequent invocations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.