Vulnerabilities of Red Hat Red Hat JBoss Web Server 6

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-76166	A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module)	4.3 Medium	Aug 19, 2026
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Not rated	Jun 9, 2026
CVE-2026-40542	Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept…	Not rated	Apr 22, 2026
CVE-2026-2332	In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to…	7.4 High	Apr 14, 2026
CVE-2026-34486	Exploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	Not rated	Apr 9, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 High	Mar 25, 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 High	Mar 5, 2026