Aller au contenu

Vulnérabilités de Red Hat Red Hat Fuse 7

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-93558 A flaw was found in Netty's WebSocketServerExtensionHandler 7.5 Élevée 18 sept. 2026
CVE-2026-93560 A flaw was found in the Netty STOMP codec 7.5 Élevée 18 sept. 2026
CVE-2026-93492 Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size 5.3 Moyenne 18 sept. 2026
CVE-2026-93491 A flaw was found in Netty's HttpServerCodec 7.5 Élevée 18 sept. 2026
CVE-2026-93488 A flaw was found in Netty 7.5 Élevée 18 sept. 2026
CVE-2026-93563 A flaw was found in Netty's `SmtpResponseDecoder` component 7.5 Élevée 18 sept. 2026
CVE-2026-93572 A flaw was found in Netty's `RedisArrayAggregator` component 7.5 Élevée 18 sept. 2026
CVE-2026-93575 A flaw was found in Netty's MqttDecoder 7.5 Élevée 18 sept. 2026
CVE-2026-93561 A flaw was found in io.netty/netty-codec-memcache 6.5 Moyenne 18 sept. 2026
CVE-2026-87743 A flaw was found in Quarkus HTTP security 7.5 Élevée 18 sept. 2026
CVE-2026-93494 A flaw was found in Netty's StompSubframeDecoder component 7.5 Élevée 18 sept. 2026
CVE-2026-89058 Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config 7.4 Élevée 18 sept. 2026
CVE-2026-89059 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) 7.5 Élevée 18 sept. 2026
CVE-2026-84218 A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service… 8.1 Élevée 1 sept. 2026
CVE-2026-17615 Resteasy-core: resteasy sourceprovider remote unauthenticated file read 7.5 Élevée 31 août 2026
CVE-2026-81624 Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite 7.5 Élevée 31 août 2026
CVE-2026-5680 Undertow-core: undertow: denial of service via websocket permessage-deflate processing 7.5 Élevée 27 août 2026
CVE-2026-14180 Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap 5.3 Moyenne 11 août 2026
CVE-2026-15567 A flaw was found in Wildfly 7.5 Élevée 11 août 2026
CVE-2026-15565 A flaw was found in Undertow 7.5 Élevée 11 août 2026
CVE-2026-15563 A flaw was found in EAP's IIOP 7.4 Élevée 11 août 2026
CVE-2026-24329 Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user. 4.9 Moyenne 11 août 2026
CVE-2026-24330 Wildfly-core: wildfly: arbitrary file read via malicious archive deployment 6.5 Moyenne 11 août 2026
CVE-2026-57915 It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized… Non notée 26 juin 2026
CVE-2026-11998 A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs… 7.6 Élevée 24 juin 2026

Autres produits Red Hat