[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-15555":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":26,"downstream":27,"duplicates":34,"related":35,"reserved_at":9,"published_at":36,"modified_at":37,"state":38,"summary":39,"references_raw":48,"kevs":78,"epss":79,"epss_history":82,"metrics":205,"affected":213},"CVE-2026-15555","A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","weakness","Draft","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-586","Object Injection",[],[],[],[],[28,30,32],{"_key":29},"RHSA-2026:53644",{"_key":31},"RHSA-2026:53645",{"_key":33},"RHSA-2026:53646",[],[],"2026-08-11T08:49:40.634Z","2026-09-17T23:27:28.084Z","Awaiting Analysis",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":41,"epss_score":42,"severity":43,"severity_score":44,"severity_version":45,"severity_source":46,"severity_vector":47,"severity_status":38},false,"low",0.00276,"high",8.8,"v3.1","cve.org","CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[49,56,60,65,70,74],{"url":50,"sources":51,"tags":53},"https://access.redhat.com/errata/RHSA-2026:53644",[46,52],"nvd",[54,55],"Vendor Advisory","X Refsource REDHAT",{"url":57,"sources":58,"tags":59},"https://access.redhat.com/errata/RHSA-2026:53806",[46,52],[54,55],{"url":61,"sources":62,"tags":63},"https://access.redhat.com/security/cve/CVE-2026-15555",[46,52],[64,55],"VDB Entry",{"url":66,"sources":67,"tags":68},"https://bugzilla.redhat.com/show_bug.cgi?id=2480637",[46,52],[69,55],"Issue Tracking",{"url":71,"sources":72,"tags":73},"https://access.redhat.com/errata/RHSA-2026:53645",[46,52],[54,55],{"url":75,"sources":76,"tags":77},"https://access.redhat.com/errata/RHSA-2026:53646",[46,52],[54,55],[],{"date":80,"score":42,"percentile":81},"2026-09-19",0.20293,[83,87,91,95,98,101,104,107,110,113,116,119,122,125,129,132,135,138,141,144,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204],{"date":84,"score":85,"percentile":86},"2026-08-11",0.00235,0.14535,{"date":88,"score":89,"percentile":90},"2026-08-12",0.00261,0.17782,{"date":92,"score":93,"percentile":94},"2026-08-13",0.00263,0.18186,{"date":96,"score":93,"percentile":97},"2026-08-14",0.18196,{"date":99,"score":93,"percentile":100},"2026-08-15",0.18346,{"date":102,"score":93,"percentile":103},"2026-08-16",0.18367,{"date":105,"score":93,"percentile":106},"2026-08-17",0.18285,{"date":108,"score":93,"percentile":109},"2026-08-18",0.183,{"date":111,"score":93,"percentile":112},"2026-08-19",0.18361,{"date":114,"score":93,"percentile":115},"2026-08-20",0.18388,{"date":117,"score":93,"percentile":118},"2026-08-21",0.18411,{"date":120,"score":93,"percentile":121},"2026-08-22",0.18419,{"date":123,"score":93,"percentile":124},"2026-08-23",0.18416,{"date":126,"score":127,"percentile":128},"2026-08-24",0.0026,0.17333,{"date":130,"score":127,"percentile":131},"2026-08-25",0.17346,{"date":133,"score":127,"percentile":134},"2026-08-26",0.17405,{"date":136,"score":127,"percentile":137},"2026-08-27",0.17404,{"date":139,"score":127,"percentile":140},"2026-08-28",0.17438,{"date":142,"score":127,"percentile":143},"2026-08-29",0.17453,{"date":145,"score":127,"percentile":146},"2026-08-30",0.17471,{"date":148,"score":127,"percentile":149},"2026-08-31",0.17468,{"date":151,"score":127,"percentile":152},"2026-09-01",0.17489,{"date":154,"score":127,"percentile":155},"2026-09-02",0.17504,{"date":157,"score":127,"percentile":158},"2026-09-03",0.17505,{"date":160,"score":127,"percentile":161},"2026-09-04",0.17526,{"date":163,"score":127,"percentile":164},"2026-09-05",0.1757,{"date":166,"score":127,"percentile":167},"2026-09-06",0.17584,{"date":169,"score":127,"percentile":170},"2026-09-07",0.1758,{"date":172,"score":127,"percentile":173},"2026-09-08",0.17591,{"date":175,"score":127,"percentile":176},"2026-09-09",0.17698,{"date":178,"score":127,"percentile":179},"2026-09-10",0.17692,{"date":181,"score":127,"percentile":182},"2026-09-11",0.17699,{"date":184,"score":127,"percentile":185},"2026-09-12",0.17804,{"date":187,"score":127,"percentile":188},"2026-09-13",0.17759,{"date":190,"score":127,"percentile":191},"2026-09-14",0.17776,{"date":193,"score":127,"percentile":194},"2026-09-15",0.17843,{"date":196,"score":127,"percentile":197},"2026-09-16",0.17908,{"date":199,"score":127,"percentile":200},"2026-09-17",0.17952,{"date":202,"score":42,"percentile":203},"2026-09-18",0.20291,{"date":80,"score":42,"percentile":81},[206,211],{"source":46,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":207,"cvss_v4_0":9},{"baseScore":44,"baseSeverity":208,"vectorString":47,"impactScore":209,"exploitabilityScore":210},"HIGH",9.8,7.2,{"source":52,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":212,"cvss_v4_0":9},{"baseScore":44,"baseSeverity":208,"vectorString":47,"impactScore":209,"exploitabilityScore":210},[]]