Skip to content

CVE-2025-78007 — Red Hat JBoss Deserialization

Key facts

CVE-2025-78007 is a Critical vulnerability: Red Hat JBoss Deserialization. This entry ships a detection-only PoC.
CVE CVE-2025-78007
Severity Critical
Detection / prevention —
PoC poc.py
Source 2025/CVE-2025-78007/

Details

Overview

Red Hat JBoss deserialization vulnerability

Details

  • CVE ID: CVE-2025-78007
  • CVSS Score: 9.8 (Critical)
  • Type: Deserialization
  • Product: Red Hat JBoss

Usage

python3 poc.py -t https://target -c

References

Frequently asked questions

What is CVE-2025-78007?

CVE-2025-78007 is a Critical vulnerability: Red Hat JBoss Deserialization. This entry ships a detection-only PoC.

How do I detect CVE-2025-78007?

Run the detection-only PoC included with this entry against your Docker test lab to confirm whether a target is affected; pair it with your own IDS logging.

How do I block or mitigate CVE-2025-78007?

Upgrade to a fixed version per the vendor advisory; the NVD record lists the affected versions. Use the included PoC to verify your remediation.

For authorized security testing and research only. See the full source and NVD record.