Vulnerability · Published Sep 18, 2026 · Assigned by redhat
CVE-2026-85511Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2
Medium 4.2
In plain English
A medium-severity authentication bypass by spoofing in Red Hat JBoss Enterprise Application Platform 8.1.8.GA from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)4.2Medium
Exploit odds (30 days)0.3%top 79.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding.
Affected products (as reported)
Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
References
- RHSA-2026:70228 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:70229 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:70230 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:70277 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2026-85511 vdb-entry, x_refsource_REDHAT
- RHBZ#2483140 issue-tracking, x_refsource_REDHAT