CVE-2026-15554 — Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery
the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with dir…
Published: 2026-08-11 · CVSS: 7.4 · CVSS 3.1
the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP protocol.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7