Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-85511	A flaw was found in EAP's Elytron	4.2 Medium	Sep 18, 2026
CVE-2026-10832	Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload	5.9 Medium	Sep 18, 2026
CVE-2026-86404	EAP's Artemis deserialization configuration permits deserialization by default	8.8 High	Sep 7, 2026
CVE-2026-5680	Undertow-core: undertow: denial of service via websocket permessage-deflate processing	7.5 High	Aug 27, 2026
CVE-2026-14180	Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap	5.3 Medium	Aug 11, 2026
CVE-2026-15567	A flaw was found in Wildfly	7.5 High	Aug 11, 2026
CVE-2026-15565	A flaw was found in Undertow	7.5 High	Aug 11, 2026
CVE-2026-15563	A flaw was found in EAP's IIOP	7.4 High	Aug 11, 2026
CVE-2026-15562	A flaw was found in EAP's jboss-remoting	7.5 High	Aug 11, 2026
CVE-2026-15561	A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder	7.5 High	Aug 11, 2026
CVE-2026-15560	when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object…	8.1 High	Aug 11, 2026
CVE-2026-15554	the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret…	7.4 High	Aug 11, 2026
CVE-2026-15555	A flaw was found in JBoss marshalling	8.8 High	Aug 11, 2026
CVE-2025-12799	A flaw was found in Jastow	6.5 Medium	Jul 7, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 High	May 13, 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Low	May 13, 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Medium	May 13, 2026
CVE-2026-3505	Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the…	8.7 High	Apr 15, 2026

Other Red Hat products