Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
CVE-2026-85511Medium 4.2Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth20.3%
CVE-2026-10832Medium 5.9Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload0.7%
CVE-2026-86404High 8.8Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default0.7%
CVE-2026-5680High 7.5Undertow-core: undertow: denial of service via websocket permessage-deflate processing1.1%
CVE-2026-14180Medium 5.3Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap1.0%
CVE-2026-15567High 7.5Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener0.9%
CVE-2026-15565High 7.5Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method1.0%
CVE-2026-15563High 7.4Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos0.7%
CVE-2026-15562High 7.5Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service0.9%
CVE-2026-15561High 7.5Undertow-core: oom via missing limits in chunked trailer in eap's undertow0.7%
CVE-2026-15560High 8.1Openjdk-orb: unauthed class loading via iiop in eap0.7%
CVE-2026-15555High 8.8Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller0.8%
CVE-2026-15554High 7.4Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery0.5%
CVE-2025-12799Medium 6.5Jastow: jastow cross-site scripting attack due to unsanitized uri0.4%