Skip to contentRed Hat Jboss Enterprise Application Platform 8.1.8.ga vulnerabilities
- red hat data grid 8, fuse 7, jboss enterprise application platform 7 +6 more +8 moreWildfly-elytron-realm-token: parameter injection in eap's elytron oauth2CVE-2026-855114.2 Medium
- red hat cryostat 4, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +14 more +16 moreOrg.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payloadCVE-2026-108325.9 Medium
- red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4, data grid 8 +13 more +15 moreUndertow-core: undertow: denial of service via websocket permessage-deflate processingCVE-2026-56807.5 High
- red hat amq broker 7, build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +6 more +8 moreArtemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by defaultCVE-2026-864048.8 High
- red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4, data grid 8 +11 more +13 moreUndertow-core: undertow:http request smuggling via oversized chunk-size bit overlapCVE-2026-141805.3 Medium
- red hat fuse 7, jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7 +7 more +9 moreWildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listenerCVE-2026-155677.5 High
- red hat build of apache camel for spring boot 4, data grid 8, fuse 7 +9 more +11 moreUndertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage methodCVE-2026-155657.5 High
- red hat fuse 7, jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7 +11 more +13 moreWildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dosCVE-2026-155637.4 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25 +5 more +7 moreJboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of serviceCVE-2026-155627.5 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25 +5 more +7 moreUndertow-core: oom via missing limits in chunked trailer in eap's undertowCVE-2026-155617.5 High
- red hat jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25, jboss enterprise application platform 8.1 +5 more +7 moreOpenjdk-orb: unauthed class loading via iiop in eapCVE-2026-155608.1 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25 +6 more +8 moreJboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshallerCVE-2026-155558.8 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25 +5 more +7 moreUndertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgeryCVE-2026-155547.4 High