WebLogic T3/IIOP Deserialization Exploit Attempt (CVE-2026-70756)

Ankit Mehta@Secvyn

•updated 29 days ago•3•0•4

Detects attempts to exploit Oracle WebLogic Server vulnerabilities, specifically those leveraging the T3 protocol to transmit malicious Java serialized payloads, as seen in CVE-2026-70756. The rule identifies suspicious T3 handshake patterns and the presence of common Java deserialization gadget chains.