RHSA-2026:70229

Vulnerability from csaf_redhat - Published: 2026-09-22 13:03 - Updated: 2026-09-22 18:13
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update
Severity
Important
Notes
Topic: A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 8.1.8 serves as a replacement for Red Hat JBoss Enterprise Application Platform 8.1.7, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 8.1.8 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es): * jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser [eap-8.1.z] (CVE-2026-68494) * netty-codec-http2: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec [eap-8.1.z] (CVE-2026-56745) * netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration [eap-8.1.z] (CVE-2026-62243) * bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length [eap-8.1.z] (CVE-2026-59649) * jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified [eap-8.1.z] (CVE-2026-54515) * jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties [eap-8.1.z] (CVE-2026-59889) * netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names [eap-8.1.z] (CVE-2026-73508) * jboss-eap.1-runtime-maven-repository.zip: jackson-core: Denial of Service via incomplete fix in async JSON parser [eap-8.1.z] (CVE-2026-68494) * jboss-eap-runtime-maven-repository.zip: jackson-core: Denial of Service via incomplete fix in async JSON parser [eap-8.1.z] (CVE-2026-68494) * bcprov-jdk18on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion [eap-8.1.z] (CVE-2026-3505) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays [eap-8.1.z] (CVE-2026-69152) * netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) [eap-8.1.z] (CVE-2026-59899) * netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header [eap-8.1.z] (CVE-2026-56746) * netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec [eap-8.1.z] (CVE-2026-56745) * netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing [eap-8.1.z] (CVE-2026-55831) * netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification [eap-8.1.z] (CVE-2026-55833) * jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution [eap-8.1.z] (CVE-2026-54513) * jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass [eap-8.1.z] (CVE-2026-54512) * undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap [eap-8.1.z] (CVE-2026-14180) * artemis-server: artemis-server: Pre-auth topology disclosure via CORE SUBSCRIBE_TOPOLOGY_V2 on channel0 [eap-8.1.z] (CVE-2026-49363) * undertow-websockets-jsr: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method [eap-8.1.z] (CVE-2026-15565) * wildfly-iiop-openjdk: Wildfly: Pre-auth denial of service on the IIOP listener [eap-8.1.z] (CVE-2026-15567) * cxf-rt-transports-jms: Apache CXF: Arbitrary code execution via untrusted JMS configuration [eap-8.1.z] (CVE-2026-50632) * cxf-core: Apache CXF: Information disclosure via out-of-band external entity resolution due to missing JAXP hardening [eap-8.1.z] (CVE-2026-49875) * wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload [eap-8.1.z] (CVE-2026-10832) * cxf-rt-transports-jms: Apache CXF: Remote Code Execution via untrusted JMS configuration [eap-8.1.z] (CVE-2026-44417) * wildfly-elytron-realm-token: parameter injection in EAP's elytron oauth2 [eap-8.1.z] (CVE-2026-85511) * jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include [eap-8.1.z] (CVE-2026-46581) * wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS [eap-8.1.z] (CVE-2026-15563) * jboss-remoting: jboss-remoting: integer overflow in MessageReader leads to pre-authentication denial of service [eap-8.1.z] (CVE-2026-15562) * undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow [eap-8.1.z] (CVE-2026-15561) * openjdk-orb: unauthed class loading via IIOP in EAP [eap-8.1.z] (CVE-2026-15560) * artemis-server: Apache Artemis — session hijack via missing authentication [eap-8.1.z] (CVE-2026-57967) * wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller [eap-8.1.z] (CVE-2026-15555) * undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery [eap-8.1.z] (CVE-2026-15554) * jgroups: artemis cluster password leak via jgroups spoof [eap-8.1.z] (CVE-2026-49364) * artemis-server: artemis core protocol permits unauthed queue creation [eap-8.1.z] (CVE-2026-49362) * artemis-server: artemis messaging handlers in Red Hat EAP permit deserialization by default [eap-8.1.z] (CVE-2026-86404) * undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing [eap-8.1.z] (CVE-2026-5680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-3505

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD (Authenticated Encryption with Associated Data) message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory exhaustion in a JVM, resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-cli-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-commons-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-core-client-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-dto-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-hornetq-protocol-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-hqclient-protocol-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-jakarta-client-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-jakarta-ra-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-jakarta-server-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-jakarta-service-extensions-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-jdbc-store-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-journal-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-selector-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-activemq-artemis-server-0:2.40.0-8.redhat_00024.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.7-1.SP1_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.7-1.SP1_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.7-1.SP1_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-bouncycastle-jmail-0:1.85.0-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-bouncycastle-pg-0:1.85.0-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-bouncycastle-pkix-0:1.85.0-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-bouncycastle-prov-0:1.85.0-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-bouncycastle-util-0:1.85.0-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-codemodel-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.8.0-1.GA_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.54-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.54-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-common-api-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-common-impl-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-common-spi-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-core-api-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-core-impl-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-deployers-common-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-jdbc-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ironjacamar-validator-0:3.0.22-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-0:4.0.7-4.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-log4j-0:2.25.4-1.redhat_00003.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-log4j-0:2.25.4-1.redhat_00003.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-neethi-0:3.2.2-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-neethi-0:3.2.2-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-common-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.136-1.Final_redhat_00001.1.el9eap.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.136-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-parsson-0:1.1.9-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-parsson-0:1.1.9-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-rngom-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-slf4j-0:2.0.18-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-slf4j-0:2.0.18-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-slf4j-api-0:2.0.18-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-txw2-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.11-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.8-9.GA_redhat_00006.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.8-9.GA_redhat_00006.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.8-9.GA_redhat_00006.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-xml-security-0:3.0.6-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-xml-security-0:3.0.6-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-xsom-0:4.0.7-4.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer() method using exponential doubling, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-10832

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER (Distinguished Encoding Rules) payload. The decoder attempts to allocate excessive memory based on an inflated length value without proper validation, leading to Java Virtual Machine (JVM) memory exhaustion. This results in a remote Denial of Service (DoS) for services that process untrusted DER/ASN.1 input, including SASL (Simple Authentication and Security Layer) authentication mechanisms and X.500 certificate principal parsing paths.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Moderate
CVE-2026-14180

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially crafted request with an extremely large chunk size, an attacker can cause these values to overlap, tricking the parser into thinking a request has finished prematurely. This can allow a second, "smuggled" request to be processed out of sync, potentially bypassing security controls.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Moderate
CVE-2026-15554

the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP protocol.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-15555

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.

8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-15560

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-829 - Inclusion of Functionality from Untrusted Control Sphere
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-15561

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-15562

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-15563

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-306 - Missing Authentication for Critical Function
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-15565

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-15567

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-44417

A flaw was found in Apache CXF. Untrusted users, if allowed to configure Java Message Service (JMS) for Apache CXF, can exploit this vulnerability to achieve remote code execution (RCE). This issue arises from an incomplete fix for a prior security flaw, indicating an alternative path that could lead to code execution.

7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-15 - External Control of System or Configuration Setting
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-46581

A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-49362

Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATE_QUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state manipulation.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-49363

A missing authentication vulnerability was found in Apache ActiveMQ Artemis. The SUBSCRIBE_TOPOLOGY_V2 handler in CoreProtocolManager.LocalChannelHandler.handlePacket() processes topology subscription requests on channel0 with zero authentication -- no call to getSecurityStore(), no credential verification, no subject validation. An unauthenticated attacker can send a single 5-byte packet on the CORE protocol (via :8080 HTTP-upgrade in EAP or :61616 in AMQ Broker) to obtain the broker's nodeID (type-1 UUID embedding MAC address), internal hostname/IP, port numbers, connector configurations, and backup/scale-down group names. In clustered deployments, a persistent ClusterTopologyListener is registered that continuously pushes all topology changes to the unauthenticated client. This contrasts with the federation handler in the same file which was fixed via ARTEMIS-5928 (CVE-2026-27446). The leaked nodeID UUID seed directly enables session-name brute-force for REATTACH_SESSION session hijack.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-306 - Missing Authentication for Critical Function
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Moderate
CVE-2026-49364

Artemis and JGroups lack of access controls in certain situations can allow an attacker to spoof a password request in JGroups and subsequently gain access to the cluster. This allows the attacker manage-level authority for provided messaging and queue operations.

8.0 (High)
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-49875

A flaw was found in Apache CXF. The EndpointReferenceUtils and W3CMultiSchemaFactory classes within Apache CXF construct a SAXParserFactory without proper security configurations. This oversight enables out-of-band (OOB) external entity resolution, a type of XML External Entity (XXE) vulnerability. A remote attacker could exploit this to disclose sensitive information from the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-611 - Improper Restriction of XML External Entity Reference
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-50632

A flaw was found in Apache CXF. This vulnerability, stemming from an incomplete fix for a previous issue, allows untrusted users who can configure Java Message Service (JMS) for Apache CXF to achieve arbitrary code execution. This could lead to a complete compromise of the affected system.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-54512

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-54513

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-184 - Incomplete List of Disallowed Inputs
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-54515

A flaw was found in jackson-databind. This vulnerability occurs in the data-binding functionality where properties intended to be ignored are incorrectly restored and become writable again. An attacker could potentially exploit this by providing input that modifies data through these supposedly ignored properties. This could lead to unintended changes in application data, impacting data integrity.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Moderate
CVE-2026-55831

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-55833

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-56745

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-772 - Missing Release of Resource after Effective Lifetime
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-56746

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-807 - Reliance on Untrusted Inputs in a Security Decision
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-57967

in Apache Artemis, the REATTACH_SESSION handler performs zero authentication — it looks up the session by name only and calls transferConnection() unconditionally, migrating the authenticated session to the attacker's connection. The hijacked cluster-bridge session inherits full broker-management authority (message injection, topology manipulation, journal access)

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-306 - Missing Authentication for Critical Function
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-59649

A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine (JVM) maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message, leading to excessive memory consumption and a Denial of Service (DoS) condition where the application becomes unresponsive or crashes.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-59889

A flaw was found in jackson-databind. The UnwrappedPropertyHandler.processUnwrapped() method, responsible for handling @JsonUnwrapped properties, replays buffered JSON without properly checking the active view. This allows an attacker to write data to a property annotated with both @JsonView and @JsonUnwrapped even when deserializing under a less-privileged view. This can lead to mass-assignment and privilege escalation, enabling an untrusted caller to modify sensitive data that should be restricted to privileged users.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Moderate
CVE-2026-59899

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-62243

A flaw was found in Netty (io.netty:netty-handler). When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping (Java 25+), TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a fraudulent certificate for a different hostname, which is then accepted without proper validation. This could lead to sensitive information disclosure.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-68494

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-73508

A flaw was found in Netty, an asynchronous network application framework. When processing malformed domain names in DNS packets, the DNS record decoder fails to release allocated memory. This vulnerability allows an unauthenticated remote attacker to incrementally leak direct memory, eventually leading to a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-772 - Missing Release of Resource after Effective Lifetime
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
CVE-2026-85511

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding.

4.2 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE-290 - Authentication Bypass by Spoofing
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Low
CVE-2026-86404

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject() uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity()/isTrustedType() method. However, by default both allow-list and block-list are empty. When the allow-list is empty (size == 0), isTrustedType() returns true for ALL classes. This means all classes are deserializable by default.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 148 products, the same list as for CVE-2026-3505
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:70229 self
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://access.redhat.com/articles/7137769 external
https://bugzilla.redhat.com/show_bug.cgi?id=2455350 external
https://bugzilla.redhat.com/show_bug.cgi?id=2458638 external
https://bugzilla.redhat.com/show_bug.cgi?id=2477930 external
https://bugzilla.redhat.com/show_bug.cgi?id=2477945 external
https://bugzilla.redhat.com/show_bug.cgi?id=2478013 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480601 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480637 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480638 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480729 external
https://bugzilla.redhat.com/show_bug.cgi?id=2483131 external
https://bugzilla.redhat.com/show_bug.cgi?id=2483133 external
https://bugzilla.redhat.com/show_bug.cgi?id=2483135 external
https://bugzilla.redhat.com/show_bug.cgi?id=2483136 external
https://bugzilla.redhat.com/show_bug.cgi?id=2483138 external
https://bugzilla.redhat.com/show_bug.cgi?id=2483140 external
https://bugzilla.redhat.com/show_bug.cgi?id=2484703 external
https://bugzilla.redhat.com/show_bug.cgi?id=2488304 external
https://bugzilla.redhat.com/show_bug.cgi?id=2488309 external
https://bugzilla.redhat.com/show_bug.cgi?id=2490628 external
https://bugzilla.redhat.com/show_bug.cgi?id=2491620 external
https://bugzilla.redhat.com/show_bug.cgi?id=2492010 external
https://bugzilla.redhat.com/show_bug.cgi?id=2492015 external
https://bugzilla.redhat.com/show_bug.cgi?id=2492016 external
https://bugzilla.redhat.com/show_bug.cgi?id=2492627 external
https://bugzilla.redhat.com/show_bug.cgi?id=2494771 external
https://bugzilla.redhat.com/show_bug.cgi?id=2500653 external
https://bugzilla.redhat.com/show_bug.cgi?id=2503101 external
https://bugzilla.redhat.com/show_bug.cgi?id=2503103 external
https://bugzilla.redhat.com/show_bug.cgi?id=2505422 external
https://bugzilla.redhat.com/show_bug.cgi?id=2505911 external
https://bugzilla.redhat.com/show_bug.cgi?id=2507482 external
https://bugzilla.redhat.com/show_bug.cgi?id=2510195 external
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://bugzilla.redhat.com/show_bug.cgi?id=2511026 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515377 external
https://bugzilla.redhat.com/show_bug.cgi?id=2521309 external
https://issues.redhat.com/browse/JBEAP-32314 external
https://issues.redhat.com/browse/JBEAP-32869 external
https://issues.redhat.com/browse/JBEAP-33162 external
https://issues.redhat.com/browse/JBEAP-33185 external
https://issues.redhat.com/browse/JBEAP-33236 external
https://issues.redhat.com/browse/JBEAP-33237 external
https://issues.redhat.com/browse/JBEAP-33288 external
https://issues.redhat.com/browse/JBEAP-33363 external
https://issues.redhat.com/browse/JBEAP-33405 external
https://issues.redhat.com/browse/JBEAP-33409 external
https://issues.redhat.com/browse/JBEAP-33413 external
https://issues.redhat.com/browse/JBEAP-33449 external
https://issues.redhat.com/browse/JBEAP-33459 external
https://issues.redhat.com/browse/JBEAP-33501 external
https://issues.redhat.com/browse/JBEAP-33580 external
https://issues.redhat.com/browse/JBEAP-33616 external
https://issues.redhat.com/browse/JBEAP-33640 external
https://issues.redhat.com/browse/JBEAP-33683 external
https://issues.redhat.com/browse/JBEAP-33848 external
https://issues.redhat.com/browse/JBEAP-33871 external
https://issues.redhat.com/browse/JBEAP-33904 external
https://issues.redhat.com/browse/JBEAP-33925 external
https://issues.redhat.com/browse/JBEAP-33967 external
https://issues.redhat.com/browse/JBEAP-33968 external
https://issues.redhat.com/browse/JBEAP-33973 external
https://issues.redhat.com/browse/JBEAP-34018 external
https://issues.redhat.com/browse/JBEAP-34095 external
https://issues.redhat.com/browse/JBEAP-34096 external
https://issues.redhat.com/browse/JBEAP-34111 external
https://issues.redhat.com/browse/JBEAP-34161 external
https://issues.redhat.com/browse/JBEAP-34222 external
https://issues.redhat.com/browse/JBEAP-34521 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-3505 self
https://bugzilla.redhat.com/show_bug.cgi?id=2458638 external
https://www.cve.org/CVERecord?id=CVE-2026-3505 external
https://nvd.nist.gov/vuln/detail/CVE-2026-3505 external
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%9… external
https://access.redhat.com/security/cve/CVE-2026-5680 self
https://bugzilla.redhat.com/show_bug.cgi?id=2455350 external
https://www.cve.org/CVERecord?id=CVE-2026-5680 external
https://nvd.nist.gov/vuln/detail/CVE-2026-5680 external
https://access.redhat.com/security/cve/CVE-2026-10832 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484703 external
https://www.cve.org/CVERecord?id=CVE-2026-10832 external
https://nvd.nist.gov/vuln/detail/CVE-2026-10832 external
https://access.redhat.com/security/cve/CVE-2026-14180 self
https://bugzilla.redhat.com/show_bug.cgi?id=2494771 external
https://www.cve.org/CVERecord?id=CVE-2026-14180 external
https://nvd.nist.gov/vuln/detail/CVE-2026-14180 external
https://access.redhat.com/security/cve/CVE-2026-15554 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480601 external
https://www.cve.org/CVERecord?id=CVE-2026-15554 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15554 external
https://access.redhat.com/security/cve/CVE-2026-15555 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480637 external
https://www.cve.org/CVERecord?id=CVE-2026-15555 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15555 external
https://access.redhat.com/security/cve/CVE-2026-15560 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483131 external
https://www.cve.org/CVERecord?id=CVE-2026-15560 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15560 external
https://access.redhat.com/security/cve/CVE-2026-15561 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483133 external
https://www.cve.org/CVERecord?id=CVE-2026-15561 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15561 external
https://access.redhat.com/security/cve/CVE-2026-15562 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483135 external
https://www.cve.org/CVERecord?id=CVE-2026-15562 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15562 external
https://access.redhat.com/security/cve/CVE-2026-15563 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483138 external
https://www.cve.org/CVERecord?id=CVE-2026-15563 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15563 external
https://access.redhat.com/security/cve/CVE-2026-15565 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490628 external
https://www.cve.org/CVERecord?id=CVE-2026-15565 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15565 external
https://cwe.mitre.org/data/definitions/120.html external
https://access.redhat.com/security/cve/CVE-2026-15567 self
https://bugzilla.redhat.com/show_bug.cgi?id=2491620 external
https://www.cve.org/CVERecord?id=CVE-2026-15567 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15567 external
https://access.redhat.com/security/cve/CVE-2026-44417 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480729 external
https://www.cve.org/CVERecord?id=CVE-2026-44417 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44417 external
https://lists.apache.org/thread/bqg6gjy2cx7rfyqjx… external
https://access.redhat.com/security/cve/CVE-2026-46581 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483136 external
https://www.cve.org/CVERecord?id=CVE-2026-46581 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46581 external
https://access.redhat.com/security/cve/CVE-2026-49362 self
https://bugzilla.redhat.com/show_bug.cgi?id=2477945 external
https://www.cve.org/CVERecord?id=CVE-2026-49362 external
https://nvd.nist.gov/vuln/detail/CVE-2026-49362 external
https://access.redhat.com/security/cve/CVE-2026-49363 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492627 external
https://www.cve.org/CVERecord?id=CVE-2026-49363 external
https://nvd.nist.gov/vuln/detail/CVE-2026-49363 external
https://access.redhat.com/security/cve/CVE-2026-49364 self
https://bugzilla.redhat.com/show_bug.cgi?id=2478013 external
https://www.cve.org/CVERecord?id=CVE-2026-49364 external
https://nvd.nist.gov/vuln/detail/CVE-2026-49364 external
https://access.redhat.com/security/cve/CVE-2026-49875 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488309 external
https://www.cve.org/CVERecord?id=CVE-2026-49875 external
https://nvd.nist.gov/vuln/detail/CVE-2026-49875 external
http://www.openwall.com/lists/oss-security/2026/06/11/2 external
https://lists.apache.org/thread/3kb9w5bg90xcp06fc… external
https://access.redhat.com/security/cve/CVE-2026-50632 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488304 external
https://www.cve.org/CVERecord?id=CVE-2026-50632 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50632 external
https://lists.apache.org/thread/740ghch5z5y675cn2… external
https://access.redhat.com/security/cve/CVE-2026-54512 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492015 external
https://www.cve.org/CVERecord?id=CVE-2026-54512 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54512 external
https://github.com/FasterXML/jackson-databind/com… external
https://github.com/FasterXML/jackson-databind/iss… external
https://github.com/FasterXML/jackson-databind/sec… external
https://access.redhat.com/security/cve/CVE-2026-54513 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492010 external
https://www.cve.org/CVERecord?id=CVE-2026-54513 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54513 external
https://github.com/FasterXML/jackson-databind/com… external
https://github.com/FasterXML/jackson-databind/com… external
https://github.com/FasterXML/jackson-databind/iss… external
https://github.com/FasterXML/jackson-databind/iss… external
https://github.com/FasterXML/jackson-databind/pull/5984 external
https://github.com/FasterXML/jackson-databind/sec… external
https://access.redhat.com/security/cve/CVE-2026-54515 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492016 external
https://www.cve.org/CVERecord?id=CVE-2026-54515 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54515 external
https://github.com/FasterXML/jackson-databind/com… external
https://github.com/FasterXML/jackson-databind/iss… external
https://github.com/FasterXML/jackson-databind/iss… external
https://github.com/FasterXML/jackson-databind/sec… external
https://access.redhat.com/security/cve/CVE-2026-55831 self
https://bugzilla.redhat.com/show_bug.cgi?id=2503103 external
https://www.cve.org/CVERecord?id=CVE-2026-55831 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55831 external
https://github.com/netty/netty/commit/5b68c61f37a… external
https://github.com/netty/netty/commit/bb2ff68a1fb… external
https://github.com/netty/netty/releases/tag/netty… external
https://github.com/netty/netty/releases/tag/netty… external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-55833 self
https://bugzilla.redhat.com/show_bug.cgi?id=2503101 external
https://www.cve.org/CVERecord?id=CVE-2026-55833 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55833 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-56745 self
https://bugzilla.redhat.com/show_bug.cgi?id=2505911 external
https://www.cve.org/CVERecord?id=CVE-2026-56745 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56745 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-56746 self
https://bugzilla.redhat.com/show_bug.cgi?id=2505422 external
https://www.cve.org/CVERecord?id=CVE-2026-56746 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56746 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-57967 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480638 external
https://www.cve.org/CVERecord?id=CVE-2026-57967 external
https://nvd.nist.gov/vuln/detail/CVE-2026-57967 external
https://access.redhat.com/security/cve/CVE-2026-59649 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510195 external
https://www.cve.org/CVERecord?id=CVE-2026-59649 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59649 external
https://github.com/bcgit/bc-java/commit/a43c40dc1… external
https://github.com/bcgit/bc-java/wiki/CVE-2026-59649 external
https://access.redhat.com/security/cve/CVE-2026-59889 self
https://bugzilla.redhat.com/show_bug.cgi?id=2500653 external
https://www.cve.org/CVERecord?id=CVE-2026-59889 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59889 external
https://github.com/FasterXML/jackson-databind/com… external
https://github.com/FasterXML/jackson-databind/iss… external
https://github.com/FasterXML/jackson-databind/pull/6056 external
https://github.com/FasterXML/jackson-databind/sec… external
https://access.redhat.com/security/cve/CVE-2026-59899 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507482 external
https://www.cve.org/CVERecord?id=CVE-2026-59899 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59899 external
https://github.com/netty/netty/security/advisorie… external
https://netty.io/news/2026/07/09/4-1-136-Final.html external
https://access.redhat.com/security/cve/CVE-2026-62243 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521309 external
https://www.cve.org/CVERecord?id=CVE-2026-62243 external
https://nvd.nist.gov/vuln/detail/CVE-2026-62243 external
https://github.com/netty/netty/security/advisorie… external
https://www.vulncheck.com/advisories/netty-throug… external
https://access.redhat.com/security/cve/CVE-2026-68494 self
https://bugzilla.redhat.com/show_bug.cgi?id=2511026 external
https://www.cve.org/CVERecord?id=CVE-2026-68494 external
https://nvd.nist.gov/vuln/detail/CVE-2026-68494 external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/pull/1611 external
https://github.com/FasterXML/jackson-core/securit… external
https://github.com/advisories/GHSA-72hv-8253-57qq external
https://www.cve.org/CVERecord?id=CVE-2026-18401 external
https://access.redhat.com/security/cve/CVE-2026-69152 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://www.cve.org/CVERecord?id=CVE-2026-69152 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-73508 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515377 external
https://www.cve.org/CVERecord?id=CVE-2026-73508 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73508 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-85511 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483140 external
https://www.cve.org/CVERecord?id=CVE-2026-85511 external
https://nvd.nist.gov/vuln/detail/CVE-2026-85511 external
https://access.redhat.com/security/cve/CVE-2026-86404 self
https://bugzilla.redhat.com/show_bug.cgi?id=2477930 external
https://www.cve.org/CVERecord?id=CVE-2026-86404 external
https://nvd.nist.gov/vuln/detail/CVE-2026-86404 external
Acknowledgments
Avishek Sarkar Brian Laub
Gai Tanaka
To clipboard 

Loading 2.1 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.