7.4
Élevée
CVE-2026-19611 A flaw was found in WildFly Elytron
Description
A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords were intended to include those non-ASCII characters, leading to unauthorized access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat build of Apache Camel 4 for Quarkus 3 | Versions non publiées | |
| Red Hat build of Debezium 3 | Versions non publiées | |
| Red Hat Build of Keycloak | Versions non publiées | |
| Red Hat build of Quarkus | Versions non publiées | |
| Red Hat Data Grid 8 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 7 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 8 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions non publiées | |
| Red Hat Single Sign-On 7 | Versions non publiées |
Afficher les 5 autres branches Masquer les 5 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.3.SP2 | Versions non publiées | |
| Red Hat build of Quarkus 3.27.5.SP2 | Versions non publiées | |
| Red Hat build of Quarkus 3.33.3.SP2 | Versions non publiées | |
| Red Hat Build of Apache Camel 3.33.3.SP2 2.8 | premières → < 2.8.4.Final-redhat-00002 | 2.8.4.Final-redhat-00002 |
| Red Hat Build of Debezium 3.6 | Versions non publiées |
Références
- RHSA-2026:69440 access.redhat.com
- RHSA-2026:69470 access.redhat.com
- RHSA-2026:70257 access.redhat.com
- RHSA-2026:83612 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2514568 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat build of Apache Camel 4 for Quarkus 3
Les 75 CVE de Red Hat build of Apache Camel 4 for Quarkus 3 →
CVE-2026-107912
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
7.7
Élevée
CVE-2026-120971
A flaw was found in RESTEasy's default exception mapper
5.3
Moyenne
CVE-2026-119542
A flaw was found in the Ickle query parser in Infinispan
4.3
Moyenne
CVE-2026-94449
Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service
7.5
Élevée