Redhat Jboss Web Server vulnerabilities

• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control CVE-2026-50628 Fix available 9.8 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator CVE-2026-50627 Fix available 9.1 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 more Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils CVE-2026-49875 Fix available 9.8 CriticalJune 12, 2026
• apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 more Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor CVE-2026-34486 In KEVPublic exploitFix available EPSS 98.5% 7.5 HighApril 9, 2026
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• cisco content security management appliance, nodejs node.js, openssl +6 more +8 more The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... CVE-2016-2183 Public exploitFix available EPSS 94.7% 7.5 HighAugust 31, 2016
• apache http server, canonical ubuntu linux, debian linux +16 more +18 more The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not... CVE-2016-5387 Fix available EPSS 55.7% 8.1 HighJuly 18, 2016