Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform 8.1.8.GA

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-85511	A flaw was found in EAP's Elytron	4.2 Medium	Sep 18, 2026
CVE-2026-10832	Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload	5.9 Medium	Sep 18, 2026
CVE-2026-86404	EAP's Artemis deserialization configuration permits deserialization by default	8.8 High	Sep 7, 2026
CVE-2026-5680	Undertow-core: undertow: denial of service via websocket permessage-deflate processing	7.5 High	Aug 27, 2026
CVE-2026-14180	Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap	5.3 Medium	Aug 11, 2026
CVE-2026-15567	A flaw was found in Wildfly	7.5 High	Aug 11, 2026
CVE-2026-15565	A flaw was found in Undertow	7.5 High	Aug 11, 2026
CVE-2026-15563	A flaw was found in EAP's IIOP	7.4 High	Aug 11, 2026
CVE-2026-15562	A flaw was found in EAP's jboss-remoting	7.5 High	Aug 11, 2026
CVE-2026-15561	A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder	7.5 High	Aug 11, 2026
CVE-2026-15560	when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object…	8.1 High	Aug 11, 2026
CVE-2026-15554	the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret…	7.4 High	Aug 11, 2026
CVE-2026-15555	A flaw was found in JBoss marshalling	8.8 High	Aug 11, 2026