Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-96453 | Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates | 8.0 High | Nov 5, 2026 |
| CVE-2026-93998 | Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer | 7.4 High | Nov 5, 2026 |
| CVE-2026-120971 | A flaw was found in RESTEasy's default exception mapper | 5.3 Medium | Nov 3, 2026 |
| CVE-2026-119542 | A flaw was found in the Ickle query parser in Infinispan | 4.3 Medium | Oct 30, 2026 |
| CVE-2026-91920 | A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer… | 6.5 Medium | Oct 30, 2026 |
| CVE-2026-114488 | A flaw was found in Wildfly | 7.4 High | Oct 29, 2026 |
| CVE-2026-19610 | A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and… | 6.5 Medium | Oct 29, 2026 |
| CVE-2026-114370 | A flaw was found in the PathResourceManager component of the Undertow web server | 3.7 Low | Oct 21, 2026 |
| CVE-2026-84823 | A flaw was found in WildFly | 7.1 High | Oct 15, 2026 |
| CVE-2026-85634 | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by… | 8.8 High | Oct 15, 2026 |
| CVE-2026-93579 | Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough) | 6.5 Medium | Sep 18, 2026 |
| CVE-2026-93568 | Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests | 7.5 High | Sep 18, 2026 |
| CVE-2026-85511 | A flaw was found in EAP's Elytron | 4.2 Medium | Sep 18, 2026 |
| CVE-2026-93569 | Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority | 8.2 High | Sep 18, 2026 |
| CVE-2026-93567 | Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority | 7.5 High | Sep 18, 2026 |
| CVE-2026-10832 | Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload | 5.9 Medium | Sep 18, 2026 |
| CVE-2026-93492 | Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size | 5.3 Medium | Sep 18, 2026 |
| CVE-2026-89058 | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config | 7.4 High | Sep 18, 2026 |
| CVE-2026-89059 | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) | 7.5 High | Sep 18, 2026 |
| CVE-2026-81829 | A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed… | 5.3 Medium | Sep 17, 2026 |
| CVE-2026-17526 | Keycloak is an open-source identity and access management solution | 7.2 High | Sep 16, 2026 |
| CVE-2026-18212 | A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access… | 7.5 High | Sep 16, 2026 |
| CVE-2026-17615 | Resteasy-core: resteasy sourceprovider remote unauthenticated file read | 7.5 High | Aug 31, 2026 |
| CVE-2026-12894 | A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or… | 8.8 High | Aug 31, 2026 |
| CVE-2026-81624 | Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite | 7.5 High | Aug 31, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 503
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 460
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 450
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433