Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
CVE-2026-85511Medium 4.2Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth20.3%
CVE-2026-10832Medium 5.9Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload0.7%
CVE-2026-86404High 8.8Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default0.7%
CVE-2026-5680High 7.5Undertow-core: undertow: denial of service via websocket permessage-deflate processing1.1%
CVE-2026-14180Medium 5.3Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap1.0%
CVE-2026-28369High 8.7Undertow: undertow: request smuggling via malformed http request headers0.7%
CVE-2026-28367High 8.7Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator0.7%
CVE-2026-28368High 8.7Undertow: undertow: request smuggling via inconsistent header parsing0.7%
CVE-2025-12543Critical 9.6Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf1.3%
CVE-2024-3884High 7.5Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded1.5%