Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

• CVE-2026-96453 High 8.0 Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates 0.2%
• CVE-2026-93998 High 7.4 Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer 0.2%
• CVE-2026-120971 Medium 5.3 Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses 0.3%
• CVE-2026-119542 Medium 4.3 Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror 0.3%
• CVE-2026-91920 Medium 6.5 Undertow: undertow: chunkreader message length permits chunk-size overflow 0.2%
• CVE-2026-114488 High 7.4 Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding 0.3%
• CVE-2026-19610 Medium 6.5 Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean 0.2%
• CVE-2026-114370 Low 3.7 Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal 0.3%
• CVE-2026-85634 High 8.8 Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name 0.4%
• CVE-2026-93579 Medium 6.5 Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough) 0.9%
• CVE-2026-93568 High 7.5 Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests 1.0%
• CVE-2026-93569 High 8.2 Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority 2.2%
• CVE-2026-93567 High 7.5 Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority 2.6%
• CVE-2026-93492 Medium 5.3 Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size 0.4%
• CVE-2026-89058 High 7.4 Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config 0.5%
• CVE-2026-89059 High 7.5 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) 1.5%
• CVE-2026-81829 Medium 5.3 Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver 0.6%
• CVE-2026-17526 High 7.2 Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts 0.6%
• CVE-2026-18212 High 7.5 Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state 0.7%
• CVE-2026-17615 High 7.5 Resteasy-core: resteasy sourceprovider remote unauthenticated file read 0.8%
• CVE-2026-12894 High 8.8 Io.quarkus:quarkus-qute: quarkus-qute:server-side template injection (ssti) vulnerability in reflectionvalueresolver of the quarkus qute template engine 1.0%
• CVE-2026-81624 High 7.5 Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite 0.6%
• CVE-2026-19611 High 7.4 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding 0.9%
• CVE-2026-76166 Medium 4.3 Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram 2.7%
• CVE-2026-15571 High 7.3 Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client 0.4%
• CVE-2026-18963 Critical 9.1 Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass 4.7%
• CVE-2026-19879 Medium 5.3 Io.undertow/undertow: undertow: http response header integrity issue due to character truncation 0.4%
• CVE-2026-15556 High 8.1 Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions 0.3%
• CVE-2026-24330 Medium 6.5 Wildfly-core: wildfly: arbitrary file read via malicious archive deployment 0.5%
• CVE-2026-24329 Medium 4.9 Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user. 0.6%
• CVE-2026-18967 Medium 6.4 Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow 0.2%
• CVE-2026-16442 High 7.4 Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction 0.3%
• CVE-2026-16100 Medium 6.5 Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text 0.6%
• CVE-2026-16071 Medium 5.4 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary 0.3%
• CVE-2026-16102 High 8.1 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers 0.5%
• CVE-2026-15573 High 8.1 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher 0.5%
• CVE-2026-16443 High 7.4 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation 0.3%
• CVE-2026-18569 Low 3.7 Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens 0.2%
• CVE-2026-17614 Medium 4.4 Wildfly-core: path traversal on wildfly domain controller 1.1%
• CVE-2026-18573 Medium 6.5 Keycloak-services: keycloak-services: client access-type policy condition bypass during client update 0.5%
• CVE-2026-18572 Medium 6.5 Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes 0.4%
• CVE-2026-18571 Medium 6.6 Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation 0.5%
• CVE-2026-18570 Medium 5.4 Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowed 0.3%
• CVE-2026-18209 Low 3.4 Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check 0.4%
• CVE-2026-18206 Low 3.7 Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass 0.3%
• CVE-2026-18214 Medium 6.8 Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction 0.4%
• CVE-2026-18203 Medium 6.5 Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes 0.3%
• CVE-2026-18211 Medium 4.2 Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains 0.3%
• CVE-2026-18208 Medium 6.5 Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim 0.3%
• CVE-2026-16105 Medium 4.9 Keycloak-services: keycloak-services: missing per-role authorization on rolecontainerresource composite endpoints 0.4%