Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

• CVE-2026-28369 High 8.7 Undertow: undertow: request smuggling via malformed http request headers 0.7%
• CVE-2026-28367 High 8.7 Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator 0.7%
• CVE-2026-28368 High 8.7 Undertow: undertow: request smuggling via inconsistent header parsing 0.7%
• CVE-2025-12543 Critical 9.6 Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 1.3%
• CVE-2024-3884 High 7.5 Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 1.5%
• CVE-2025-9784 High 7.5 Undertow: undertow madeyoureset http/2 ddos vulnerability 2.3%
• CVE-2025-23368 High 8.1 Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli 0.9%