Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-86404	EAP's Artemis deserialization configuration permits deserialization by default	8.8 High	Sep 7, 2026
CVE-2026-15567	A flaw was found in Wildfly	7.5 High	Aug 11, 2026
CVE-2026-15565	A flaw was found in Undertow	7.5 High	Aug 11, 2026
CVE-2026-15563	A flaw was found in EAP's IIOP	7.4 High	Aug 11, 2026
CVE-2026-15562	Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service	7.5 High	Aug 11, 2026
CVE-2026-15561	A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder	7.5 High	Aug 11, 2026
CVE-2026-15560	when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object…	8.1 High	Aug 11, 2026
CVE-2026-15556	A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching…	8.1 High	Aug 11, 2026
CVE-2026-15554	the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret…	7.4 High	Aug 11, 2026
CVE-2026-15555	A flaw was found in JBoss marshalling	8.8 High	Aug 11, 2026
CVE-2026-10579	A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no…	9.8 Critical	Aug 11, 2026
CVE-2026-50011	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-48006	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-46340	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44890	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44250	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026

Other Red Hat products