A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.
https://access.redhat.com/errata/RHSA-2026:70277
https://access.redhat.com/errata/RHSA-2026:70230
https://access.redhat.com/errata/RHSA-2026:70229
https://access.redhat.com/errata/RHSA-2026:70228
https://access.redhat.com/errata/RHSA-2026:53806
https://access.redhat.com/errata/RHSA-2026:53646