HIGHCVSS v3.1 8.8Vulnerability
CVE-2026-12977
A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of credentials and full administrative control (SuperUser) of the server.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00246
- Cvss severity
- HIGH
- Cvss score
- 8.8
- Retrieved at
- 2026-11-10T23:35:18+00:00
- Last source
- FIRST EPSS
- Score
- 8.8
- Cvss version
- 3.1
- Cve id
- CVE-2026-12977
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-09T23:18:15+00:00
- Name
- CVE-2026-12977
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-09T19:17:04.307
- Last modified
- 2026-11-09T19:17:04.433
- Epss percentile
- 0.15949
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph