Skip to contentRed Hat Jboss Web Server 5 vulnerabilities
- red hat jboss enterprise application platform 7, jboss enterprise application platform 8, jboss enterprise application platform expansion pack +10 more +12 moreModcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagramCVE-2026-761664.3 Medium
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 moreApache CXF: OAuth2: Inverted IP Binding Check Defeats Security ControlCVE-2026-50628Fix available9.8 Critical
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 moreApache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token ValidatorCVE-2026-50627Fix available9.1 Critical
- apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 moreApache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtilsCVE-2026-49875Fix available9.8 Critical
- apache http server, debian linux, red hat jboss core services for rhel 8 +19 more +21 moreApache HTTP Server: mod_http2 denial of serviceCVE-2026-49975Public exploitFix availableEPSS 33.0%7.5 High
- apache httpclient, red hat cryostat 4, migration toolkit for applications 8 +45 more +47 moreApache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationCVE-2026-40542Fix available7.3 High
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorCVE-2026-34486In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by defaultCVE-2026-29146Fix available7.5 High
- codehaus-plexus plexus-utils, red hat cryostat 4, openshift developer tools and services +49 more +51 morePlexus-Utils has a Directory Traversal vulnerability in its extractFile methodCVE-2025-67030Fix available8.8 High
- apache tomcat, tomcat native, red hat enterprise linux 10 +10 more +12 moreApache Tomcat Native, Apache Tomcat: OCSP revocation bypassCVE-2026-24734Fix available7.5 High
- dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 moreMemory leak on tls connectionsCVE-2022-4132Fix available5.9 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High