THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-17615 (HIGH 7.5) — A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts applic

[NVD] CVE-2026-17615 (HIGH 7.5) — A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts applic

mednvdPublished 2026-08-31

CVE-2026-17615 CVSS: 7.5 HIGH Published: 2026-08-31T17:17:37.717

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and returns Source or StreamSource, the serv

Indicators of compromise

CVE-2026-17615cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-17615