{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss  Enterprise Application Platform 8.1.9 serves as a replacement for Red Hat JBoss Enterprise Application Platform 8.1.8, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 8.1.9 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* netty-codec-http2: Netty: Information disclosure via CORS Vary header overwrite [eap-8.1.z] (CVE-2026-59903)\n\n* netty-buffer: Netty: Information disclosure via CORS Vary header overwrite [eap-8.1.z] (CVE-2026-59903)\n\n* cxf: Apache CXF: Denial of service via many attachment headers [eap-8.1.z] (CVE-2026-64958)\n\n* cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens [eap-8.1.z] (CVE-2026-65583)\n\n* cxf-xjc-bug986: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-security: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-server: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-runtime: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-resources: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-wsdl: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-services-sts-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-java2ws: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-policy: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-client: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-wsdlto-frontend-jaxws: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-common: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-dv: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-services-ws-discovery-api: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-wsdlto-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-transports-undertow: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-wsdlto-databinding-jaxb: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-rm: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-boolean: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-validator: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-transports-udp: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-factories: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-ts: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-bindings-coloc: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-features-clustering: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-transports-local: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-transports-http-hc: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-security: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-transports-jms: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-databinding-aegis: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-management: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-features-throttling: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-features-logging: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-bindings-xml: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-security-saml: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-services-sts-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-wsdlto-frontend-jaxws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-services-ws-discovery-api: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-common: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-wsdlto-databinding-jaxb: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-factories: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-runtime: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-validator: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-dv: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-boolean: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-ts: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-resources: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-bug986: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-java2ws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-transports-udp: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-client: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-transports-undertow: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-server: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-wsdlto-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-bindings-coloc: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-security: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-databinding-aegis: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-policy: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-features-logging: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-frontend-simple: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-security: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-jms: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-http-hc: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-local: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-bindings-xml: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-http: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-rm: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-frontend-jaxws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-features-clustering: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-mex: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-databinding-jaxb: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-bindings-soap: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-addr: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-management: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-features-throttling: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-security-saml: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-wsdl: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-frontend-simple: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-addr: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* wildfly-iiop-openjdk: EAP IIOP listeners may permit unauthed deserialization [eap-8.1.z] (CVE-2026-15564)\n\n* wildfly-iiop-openjdk: Wildfly: Authentication bypass on IIOP EJB invocations as CSIv2 ITTPrincipalName accepted without transport binding [eap-8.1.z] (CVE-2026-114488)\n\n* brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays [eap-8.1.z] (CVE-2026-69152)\n\n* wildfly-deployment-repository: Path Traversal on WildFly Domain Controller [eap-8.1.z] (CVE-2026-17614)\n\n* sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation [eap-8.1.z] (CVE-2026-56624)\n\n* resteasy-core: RESTeasy SourceProvider remote unauthenticated file read [eap-8.1.z] (CVE-2026-17615)\n\n* wildfly-platform-mbean: wildfly-platform-mbean: RBAC sensitive attribute read bypass for platform RuntimeMxBean [eap-8.1.z] (CVE-2026-19610)\n\n* cxf-rt-transports-jms: Apache CXF: Remote Code Execution via unsafe deserialization of JMS ObjectMessage [eap-8.1.z] (CVE-2026-66909)\n\n* wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding [eap-8.1.z] (CVE-2026-19611)\n\n* jboss-eap-runtime-maven-repository.zip: js-yaml: Denial of Service vulnerability in YAML parsing [eap-8.1.z] (CVE-2026-84375)\n\n* openjdk-orb: Incomplete fix for CVE-2026-15560,unauthed class loading via IIOP in EAP [eap-8.1.z] (CVE-2026-84725)\n\n* wildfly-server: wildfly-core: Deployer RBAC role privilege escalation via path traversal in deployment name [eap-8.1.z] (CVE-2026-85634)\n\n* resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) [eap-8.1.z] (CVE-2026-89059)\n\n* netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams [eap-8.1.z] (CVE-2026-93488)\n\n* resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config [eap-8.1.z] (CVE-2026-89058)\n\n* netty-codec-http: Netty: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queue [eap-8.1.z] (CVE-2026-93491)\n\n* netty-codec-http: Netty: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service [eap-8.1.z] (CVE-2026-93558)\n\n* netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte [eap-8.1.z] (CVE-2026-93565)\n\n* netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext [eap-8.1.z] (CVE-2026-75595)\n\n* bcprov-jdk18on: Bouncy Castle for Java: Authenticated Encryption Forgery Vulnerability [eap-8.1.z] (CVE-2026-12803)\n\n* bcprov-jdk18on: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing [eap-8.1.z] (CVE-2026-13506)\n\n* bcprov-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation [eap-8.1.z] (CVE-2026-14682)\n\n* bcprov-jdk18on: Bouncy Castle for Java: Cryptographic key compromise due to unvalidated Diffie-Hellman peer value [eap-8.1.z] (CVE-2026-59650)\n\n* bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystore [eap-8.1.z] (CVE-2026-59651)\n\n* bcprov-jdk18on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split [eap-8.1.z] (CVE-2026-12816)\n\n* bcpkix-jdk18on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP response [eap-8.1.z] (CVE-2026-58062)\n\n* bcpkix-jdk18on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI [eap-8.1.z] (CVE-2026-8763)\n\n* netty-codec-http: Netty: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling [eap-8.1.z] (CVE-2026-93562)\n\n* netty-codec-http: Netty: HTTP Request Smuggling due to control characters in the chunk-size line [eap-8.1.z] (CVE-2026-93566)\n\n* netty-codec-http: Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling [eap-8.1.z] (CVE-2026-93573)\n\n* netty-codec-http: Netty: HTTP request smuggling via post-digit whitespace in chunk-size parsing [eap-8.1.z] (CVE-2026-93574)\n\n* netty-codec-http: Netty: Denial of Service via unbounded SPDY concurrent streams [eap-8.1.z] (CVE-2026-100655)\n\n* netty-codec-http: Netty: Denial of Service via unbounded SPDY concurrent streams [eap-8.1.z] (CVE-2026-100655)\n\n* netty-codec-http: Netty: Denial of Service via unbounded queue growth during HTTP request pipelining [eap-8.1.z] (CVE-2026-100656)\n\n* netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec [eap-8.1.z] (CVE-2026-100666)\n\n* cxf-rt-ws-mex: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-databinding-jaxb: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-bindings-soap: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-transports-http: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-frontend-jaxws: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:95887",
        "url": "https://access.redhat.com/errata/RHSA-2026:95887"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/7148325",
        "url": "https://access.redhat.com/articles/7148325"
      },
      {
        "category": "external",
        "summary": "2478005",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2478005"
      },
      {
        "category": "external",
        "summary": "2491619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491619"
      },
      {
        "category": "external",
        "summary": "2503053",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503053"
      },
      {
        "category": "external",
        "summary": "2507631",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507631"
      },
      {
        "category": "external",
        "summary": "2507635",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507635"
      },
      {
        "category": "external",
        "summary": "2510188",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510188"
      },
      {
        "category": "external",
        "summary": "2510198",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510198"
      },
      {
        "category": "external",
        "summary": "2510203",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510203"
      },
      {
        "category": "external",
        "summary": "2510240",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510240"
      },
      {
        "category": "external",
        "summary": "2510257",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510257"
      },
      {
        "category": "external",
        "summary": "2510258",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510258"
      },
      {
        "category": "external",
        "summary": "2510259",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510259"
      },
      {
        "category": "external",
        "summary": "2510260",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510260"
      },
      {
        "category": "external",
        "summary": "2510722",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
      },
      {
        "category": "external",
        "summary": "2511978",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511978"
      },
      {
        "category": "external",
        "summary": "2511979",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511979"
      },
      {
        "category": "external",
        "summary": "2511981",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511981"
      },
      {
        "category": "external",
        "summary": "2511983",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511983"
      },
      {
        "category": "external",
        "summary": "2511995",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511995"
      },
      {
        "category": "external",
        "summary": "2514537",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514537"
      },
      {
        "category": "external",
        "summary": "2514568",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514568"
      },
      {
        "category": "external",
        "summary": "2517538",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517538"
      },
      {
        "category": "external",
        "summary": "2519756",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519756"
      },
      {
        "category": "external",
        "summary": "2519775",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519775"
      },
      {
        "category": "external",
        "summary": "2519953",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519953"
      },
      {
        "category": "external",
        "summary": "2527118",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
      },
      {
        "category": "external",
        "summary": "2527228",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527228"
      },
      {
        "category": "external",
        "summary": "2528476",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528476"
      },
      {
        "category": "external",
        "summary": "2536887",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536887"
      },
      {
        "category": "external",
        "summary": "2536891",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536891"
      },
      {
        "category": "external",
        "summary": "2536932",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536932"
      },
      {
        "category": "external",
        "summary": "2536951",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536951"
      },
      {
        "category": "external",
        "summary": "2536952",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536952"
      },
      {
        "category": "external",
        "summary": "2536954",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536954"
      },
      {
        "category": "external",
        "summary": "2536964",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536964"
      },
      {
        "category": "external",
        "summary": "2536966",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536966"
      },
      {
        "category": "external",
        "summary": "2541803",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541803"
      },
      {
        "category": "external",
        "summary": "2541863",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541863"
      },
      {
        "category": "external",
        "summary": "2541907",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541907"
      },
      {
        "category": "external",
        "summary": "JBEAP-35632",
        "url": "https://issues.redhat.com/browse/JBEAP-35632"
      },
      {
        "category": "external",
        "summary": "JBEAP-35651",
        "url": "https://issues.redhat.com/browse/JBEAP-35651"
      },
      {
        "category": "external",
        "summary": "JBEAP-35658",
        "url": "https://issues.redhat.com/browse/JBEAP-35658"
      },
      {
        "category": "external",
        "summary": "JBEAP-35795",
        "url": "https://issues.redhat.com/browse/JBEAP-35795"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95887.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update",
    "tracking": {
      "current_release_date": "2026-11-06T22:23:49+00:00",
      "generator": {
        "date": "2026-11-06T22:23:49+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHSA-2026:95887",
      "initial_release_date": "2026-11-06T15:31:53+00:00",
      "revision_history": [
        {
          "date": "2026-11-06T15:31:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-06T15:31:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-06T22:23:49+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform 8.1",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform 8.1",
                  "product_id": "Red Hat JBoss Enterprise Application Platform 8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-8763",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-08-03T02:01:23.973629+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510198"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java, a cryptographic library. An attacker can exploit this vulnerability by manipulating rfc822Name and URI fields within X.509 certificates using a trailing dot. This bypasses Name Constraints, potentially leading to spoofing or unauthorized access. Such an exploit impacts the integrity and confidentiality of communications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in Bouncy Castle for Java, a cryptographic library used across various Red Hat products. The vulnerability allows an attacker to bypass Name Constraints in X.509 certificates by manipulating rfc822Name and URI fields with a trailing dot. This bypass could lead to spoofing or unauthorized access, impacting the integrity and confidentiality of communications in affected Red Hat environments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8763"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510198",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510198"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-8763",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-8763"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8763",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8763"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558",
          "url": "https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-8763",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-8763"
        }
      ],
      "release_date": "2026-08-03T00:36:05.088000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI"
    },
    {
      "cve": "CVE-2026-12803",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-08-03T04:01:15.228703+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510260"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java. The cryptographic module responsible for authenticated encryption does not correctly link a unique random value (nonce) with the message authentication code when no additional authenticated data is provided. This oversight could allow an attacker to forge encrypted messages, potentially compromising the integrity of sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.bouncycastle/bc-java: Bouncy Castle for Java: Authenticated Encryption Forgery Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Bouncy Castle for Java that could lead to authenticated encryption forgery. The flaw arises when the KCCMBlockCipher MAC fails to bind the nonce in the absence of Additional Authenticated Data (AAD), potentially compromising the integrity of encrypted communications or stored data in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12803"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510260",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510260"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-12803",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-12803"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12803",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12803"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/697794413ebf7bc5e3fce609a707826ba52981af",
          "url": "https://github.com/bcgit/bc-java/commit/697794413ebf7bc5e3fce609a707826ba52981af"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/7d79aa76e984da85f2a541cae8ba2ae56e1713bc",
          "url": "https://github.com/bcgit/bc-java/commit/7d79aa76e984da85f2a541cae8ba2ae56e1713bc"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12803",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12803"
        }
      ],
      "release_date": "2026-08-03T02:52:20.460000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.bouncycastle/bc-java: Bouncy Castle for Java: Authenticated Encryption Forgery Vulnerability"
    },
    {
      "cve": "CVE-2026-12816",
      "cwe": {
        "id": "CWE-1240",
        "name": "Use of a Cryptographic Primitive with a Risky Implementation"
      },
      "discovery_date": "2026-08-03T04:01:12.229250+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510259"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java. This vulnerability allows for Message Authentication Code (MAC) forgery in the IESEngine stream-mode. The issue arises from a length-dependent Key Derivation Function (KDF) split, which an attacker could exploit to bypass integrity checks. This could lead to unauthorized manipulation of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability. Bouncy Castle for Java is susceptible to Message Authentication Code (MAC) forgery in IESEngine stream-mode due to a length-dependent Key Derivation Function (KDF) split. An unauthenticated, remote attacker could exploit this flaw to compromise the integrity of data protected by the affected cryptographic operations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12816"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510259",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510259"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-12816",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-12816"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12816",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12816"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/6d9e4bbaee9409713ada167e5f901554cbb084ac",
          "url": "https://github.com/bcgit/bc-java/commit/6d9e4bbaee9409713ada167e5f901554cbb084ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12816",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12816"
        }
      ],
      "release_date": "2026-08-03T02:53:32.240000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split"
    },
    {
      "cve": "CVE-2026-13506",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T04:01:05.710651+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510257"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java. A remote attacker could exploit a vulnerability related to how the software processes lazy ASN.1 sequences, which can reset an internal nesting-depth guard. This issue could lead to a Denial of Service (DoS), making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Bouncy Castle for Java can lead to a denial of service. A remote attacker could exploit a vulnerability in how lazy ASN.1 sequences are processed, allowing the resetting of an internal nesting-depth guard. This could result in resource exhaustion and make affected applications unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13506"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510257",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510257"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13506",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13506"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13506",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13506"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84",
          "url": "https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-13506",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-13506"
        }
      ],
      "release_date": "2026-08-03T02:56:49.476000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing"
    },
    {
      "cve": "CVE-2026-14682",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T04:01:09.225152+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510258"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java, including its LTS and FIPS variants. This vulnerability allows a remote attacker to trigger an Out-Of-Memory (OOM) error by providing specially crafted input during a definite-length read operation. This unbounded memory allocation can lead to a Denial of Service (DoS), making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Bouncy Castle for Java is bundled as a cryptographic provider across numerous Red Hat products. An unbounded up-front memory allocation on a definite-length read lets a remote attacker trigger an Out-Of-Memory condition with crafted input, resulting in a denial of service. This is broadly reachable wherever Bouncy Castle parses untrusted encoded data.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-14682"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510258",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510258"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14682",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14682"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14682",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14682"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/37094e504ef50cf9ce4e0fb9e5105d495ff5c2d2",
          "url": "https://github.com/bcgit/bc-java/commit/37094e504ef50cf9ce4e0fb9e5105d495ff5c2d2"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-14682",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-14682"
        }
      ],
      "release_date": "2026-08-03T02:44:13.256000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a mitigation for this flaw other than updating the affected Bouncy Castle component to a fixed version (bc-java 1.85, LTS 2.73.12, BC-FJA bc-fips 1.0.2.7/2.0.2/2.1.3, or bctls-fips 1.0.24) once available for the affected product.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation"
    },
    {
      "cve": "CVE-2026-15560",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-05-29T00:23:22.856000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483131"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "when EAP runs with -secmgr, the openjdk-orb\u0027s JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openjdk-orb: unauthed class loading via IIOP in EAP",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An IMPORTANT severity flaw was found in Red Hat JBoss Enterprise Application Platform (EAP) in the openjdk-orb component. When EAP is started with the Java Security Manager enabled (-secmgr), the openjdk-orb JDKBridge honours attacker-supplied CDR codebase URLs while unmarshalling objects received over IIOP on port 3528. This allows an unauthenticated remote attacker to cause the server to load and instantiate arbitrary classes from an attacker-controlled URL in the server JVM before EJB security interceptors are invoked, which can lead to complete compromise of the confidentiality, integrity, and availability of the affected server. Red Hat rates this flaw as IMPORTANT, with a CVSS 3.1 score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), matching the upstream CVSS rating; the high attack complexity reflects that exploitation requires the server to be running with the security manager enabled and the IIOP endpoint exposed. JBoss EAP 7.4 and 8.x streams are affected, and a fix is being pursued for those streams through the delegated resolution process. EAP XP 6 is not affected because the openjdk-orb component is not present in that stream.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15560"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483131",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483131"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15560",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15560"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15560",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15560"
        }
      ],
      "release_date": "2026-08-11T05:52:32.653000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users of affected JBoss EAP streams should apply the openjdk-orb updates provided for their supported EAP version through the usual update channels.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openjdk-orb: unauthed class loading via IIOP in EAP"
    },
    {
      "cve": "CVE-2026-15564",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-05-15T18:11:36.561000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2478005"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Wildfly\u0027s IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if the target EJB allows untyped method parameters, and depending on the potential gadget chains available in the running classpath.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-ejb: wildfly-iiop-openjdk: EAP IIOP listeners may permit unauthed deserialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this vulnerability as Moderate because successful exploitation requires multiple non-standard conditions despite the pre-authentication deserialization flaw. In standard deployments of JBoss Enterprise Application Platform (EAP), the IIOP service binds exclusively to localhost, preventing remote network reachability by default. Furthermore, parameter processing is constrained by declared bean types, meaning an attack succeeds only if an exposed EJB accepts generic or untyped parameters and a viable gadget chain exists on the application classpath.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15564"
        },
        {
          "category": "external",
          "summary": "RHBZ#2478005",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2478005"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15564",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15564"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15564",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15564"
        }
      ],
      "release_date": "2026-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Restrict network reachability to the IIOP listener (default TCP port 3528) so that only localhost or authorized management networks can access it.\n\n1. Restrict port exposure using firewalld:\n```bash\nfirewall-cmd --permanent --remove-port=3528/tcp\nfirewall-cmd --reload\n```\n\n2. If CORBA/IIOP interoperability is not required by deployed applications, remove the IIOP subsystem using the JBoss Management CLI:\n```bash\njboss-cli.sh --connect --command=\"/subsystem=iiop-openjdk:remove\"\n```\n\nCaveats:\nRemoving the IIOP subsystem will break remote EJB invocations or external services that rely on CORBA/IIOP protocols.\n\nWarning:\nApplying firewall changes or removing server subsystems will disrupt active client connections and requires reloading the server configuration or restarting the JBoss EAP service to take full effect.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-ejb: wildfly-iiop-openjdk: EAP IIOP listeners may permit unauthed deserialization"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kelvin Mbogo (@addcontent)"
          ]
        }
      ],
      "cve": "CVE-2026-17614",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory"
      },
      "discovery_date": "2026-07-27T19:01:43.910000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507631"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal flaw was found in WildFly\u0027s domain mode\n  implementation. The LocalFileRepository.getFile() and\n  getConfigurationFile() methods in\n  wildfly-core/deployment-repository do not validate that the\n  resolved file path remains within the configured repository or\n  configuration root directories. A remote attacker who has\n  obtained the slave host controller secret or compromised a slave\n  host controller can supply a crafted relative path containing\n  directory traversal sequences (e.g., ../../etc/passwd) via the\n  slave-DC wire protocol, causing the Domain Controller to resolve\n  and serve arbitrary files readable by the DC process. This leads\n  to unauthorized disclosure of sensitive information such as\n  configuration files, keystores, and system credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: Path Traversal on WildFly Domain Controller",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in WildFly domain mode allows an authenticated attacker, who has obtained the slave-secret credential, to perform arbitrary file reading on the Domain Controller\u0027s filesystem. This flaw bypasses intended access controls for file retrieval, potentially leading to sensitive information disclosure from the compromised host.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-17614"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507631",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507631"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-17614",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-17614"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17614",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17614"
        }
      ],
      "release_date": "2026-08-04T00:23:31.253000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-core: Path Traversal on WildFly Domain Controller"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Leon Zlobecki"
          ]
        }
      ],
      "cve": "CVE-2026-17615",
      "cwe": {
        "id": "CWE-611",
        "name": "Improper Restriction of XML External Entity Reference"
      },
      "discovery_date": "2026-07-27T19:27:51.528000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507635"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy\u0027s SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and returns Source or StreamSource, the server can be tricked into resolving the entity and including sensitive file contents in the HTTP response. This is due to the SourceProvider.writeTo() method creating a SAXParser without disabling external entity resolution, leading to an XML External Entity (XXE) vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy-core: RESTeasy SourceProvider remote unauthenticated file read",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw allows unauthenticated remote file disclosure due to improper XML external entity (XXE) resolution in RESTEasy\u0027s SourceProvider. An attacker can exploit this by sending a crafted XML request to an exposed endpoint that processes `application/xml` and returns `Source` or `StreamSource` types, leading to the disclosure of sensitive server-side files. This affects applications utilizing RESTEasy where endpoints are configured to accept XML input and return `Source` or `StreamSource` objects, potentially exposing sensitive data on Red Hat supported products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-17615"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507635",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507635"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-17615",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-17615"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17615",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17615"
        }
      ],
      "release_date": "2026-08-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid exposing RESTEasy endpoints that return Source or StreamSource types. Alternatively, implement a custom MessageBodyWriter for Source types that explicitly applies XML security features to the SAXParserFactory before parsing. Changes to application configuration or code typically require an application redeployment or restart to take effect.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "resteasy-core: RESTeasy SourceProvider remote unauthenticated file read"
    },
    {
      "cve": "CVE-2026-19610",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-31T15:37:12+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514537"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control (RBAC) checks. This allows an authenticated user with low-privileged access, such as the Monitor role, to view sensitive system properties and JVM configuration details that should be restricted.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-platform-mbean: wildfly-platform-mbean: RBAC sensitive attribute read bypass for platform RuntimeMxBean",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to be an authenticated user with at least a low-privilege management role. Successful exploitation allows an attacker to read sensitive system properties and JVM configuration data that should be restricted by RBAC. The vulnerability\u0027s root cause is a missing RBAC check in the custom read-resource operation handler for the platform-mbean resource tree.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19610"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514537",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514537"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19610",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19610"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19610",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19610"
        }
      ],
      "release_date": "2026-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-platform-mbean: wildfly-platform-mbean: RBAC sensitive attribute read bypass for platform RuntimeMxBean"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "LiuBo-keep (aidan)"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2026-19611",
      "cwe": {
        "id": "CWE-173",
        "name": "Improper Handling of Alternate Encoding"
      },
      "discovery_date": "2026-07-24T14:34:50+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514568"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords were intended to include those non-ASCII characters, leading to unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue has Moderate impact. Successful exploitation depends on accounts using fullwidth or other NFKC-compatibility characters in passwords and on the feasibility of password guessing against the deployed hash algorithm. Red Hat products that ship org.wildfly.security:wildfly-elytron-password-impl may be affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19611"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514568",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514568"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19611",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19611"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19611",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19611"
        }
      ],
      "release_date": "2026-07-24T14:34:50+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding"
    },
    {
      "cve": "CVE-2026-56624",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command"
      },
      "discovery_date": "2026-07-20T21:01:48.146372+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503053"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache MINA SSHD (server-side). During user authentication, the server\u0027s OpenSSH user certificate validation process failed to properly check for or validate unsupported options like \u0027force-command\u0027 or \u0027verify-required\u0027 embedded within a user\u0027s certificate. This oversight could allow an authenticated user to bypass intended restrictions and execute commands beyond those specified in their certificate, potentially leading to unauthorized actions on the server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important impact on Red Hat products because an authenticated remote user can completely bypass intended execution restrictions, escalating privileges beyond assigned boundaries to run arbitrary commands supported by the server. In Red Hat environments such as OpenShift Developer Tools and Red Hat build of Apache Camel, the underlying Apache MINA SSHD library provides embedded SSH connectivity for service endpoints. Exploitation requires that the target service is configured to accept OpenSSH user certificates and that the connecting party possesses a validly signed certificate issued by a trusted authority.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56624"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503053",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503053"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56624",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56624"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56624",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56624"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6",
          "url": "https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6"
        }
      ],
      "release_date": "2026-07-20T20:28:26.333000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation"
    },
    {
      "cve": "CVE-2026-57819",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-06T11:10:55.526852+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511979"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. This vulnerability allows a remote attacker to initiate a Denial of Service (DoS) attack. The issue arises because the component does not enforce a default limit on the number of form parameters processed in a JAX-RS message, enabling an attacker to send requests with an excessive quantity of parameters, leading to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache CXF: Apache CXF: Denial of Service via uncontrolled form parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Apache CXF is affected by a denial of service vulnerability due to the lack of default limits on form parameters in JAX-RS message processing. An unauthenticated remote attacker can cause resource exhaustion by sending requests with excessive form parameters.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-57819"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511979",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511979"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-57819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-57819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57819"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/2n14mk01bjc3lrsyhzrkwy8h86289mov",
          "url": "https://lists.apache.org/thread/2n14mk01bjc3lrsyhzrkwy8h86289mov"
        }
      ],
      "release_date": "2026-08-06T10:12:26.243000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Update Apache CXF to the latest version that includes the fix. Configure form parameter limits in application settings to prevent resource exhaustion attacks.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache CXF: Apache CXF: Denial of Service via uncontrolled form parameters"
    },
    {
      "cve": "CVE-2026-58062",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-08-03T03:02:06.882172+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510240"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by presenting a stapled Online Certificate Status Protocol (OCSP) response that is not properly bound to the certificate being checked. This vulnerability allows for a certificate validation bypass, potentially leading to applications accepting invalid or revoked certificates. This could enable man-in-the-middle attacks or unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP response",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This vulnerability in Bouncy Castle for Java allows a remote attacker to bypass certificate validation. By presenting a stapled OCSP response not properly bound to the certificate being checked, an attacker could cause applications to accept invalid or revoked certificates. This could facilitate man-in-the-middle attacks or unauthorized access in Red Hat products that rely on Bouncy Castle for certificate path validation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58062"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510240",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510240"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58062",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58062"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58062",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58062"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/add5f822660f3b2c29fd824e2f4095469c42a1c7",
          "url": "https://github.com/bcgit/bc-java/commit/add5f822660f3b2c29fd824e2f4095469c42a1c7"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-58062",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-58062"
        }
      ],
      "release_date": "2026-08-03T02:35:28.180000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Where Bouncy Castle performs PKIX revocation checking with stapled OCSP, pin expected peer certificate or public-key fingerprints ([CME-404](https://cmetaxonomy.org/entries/CME-404.html)) so a stapled OCSP response for a different serial cannot substitute trust. Restrict TLS clients to trusted networks and peers ([CME-202](https://cmetaxonomy.org/entries/CME-202.html), [CME-203](https://cmetaxonomy.org/entries/CME-203.html)) to reduce man-in-the-middle opportunity against revoked certificates. If stapled OCSP is not required, avoid PKIXRevocationChecker.setOcspResponses() and use CRL or online OCSP fetch paths that enforce CertID binding. Upgrade to Bouncy Castle 1.85 or later (BC-LTS 2.73.12, or bc-fips 2.0.2 / 2.1.3) when available.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP response"
    },
    {
      "cve": "CVE-2026-59650",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "discovery_date": "2026-08-03T02:01:38.583931+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510203"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java. The software fails to validate Diffie-Hellman peer values during key agreement. A remote attacker can exploit this flaw to compromise cryptographic keys, potentially leading to the decryption of sensitive communications or successful impersonation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: Bouncy Castle for Java: Cryptographic key compromise due to unvalidated Diffie-Hellman peer value",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability where Bouncy Castle for Java, as used in Red Hat products, fails to validate Diffie-Hellman peer values during key agreement. This flaw allows a remote attacker to compromise cryptographic keys, potentially leading to the decryption of sensitive communications or successful impersonation, due to the low attack complexity and lack of required user interaction.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59650"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510203",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510203"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59650",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59650"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59650",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59650"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148",
          "url": "https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59650",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59650"
        }
      ],
      "release_date": "2026-08-03T00:42:46.157000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: Bouncy Castle for Java: Cryptographic key compromise due to unvalidated Diffie-Hellman peer value"
    },
    {
      "cve": "CVE-2026-59651",
      "cwe": {
        "id": "CWE-1240",
        "name": "Use of a Cryptographic Primitive with a Risky Implementation"
      },
      "discovery_date": "2026-08-03T02:00:53.645318+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510188"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Bouncy Castle for Java. The BKS keystore, which is used for storing cryptographic keys, accepts legacy versions that utilize a 16-bit integrity Message Authentication Code (MAC) key. This weak integrity protection could allow an attacker to tamper with the keystore\u0027s contents without being detected, leading to a high integrity impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystore",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Bouncy Castle for Java is bundled as a cryptographic provider across numerous Red Hat products. The BKS keystore accepts legacy-format keystores protected by only a 16-bit integrity MAC key, weakening tamper detection and allowing undetected modification of keystore contents \u2014 a high integrity impact. Exploitation requires the application to load legacy-format BKS keystores.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510188",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510188"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59651"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/faf5daa6e9b8460f862afc0af1cc0da365f7d4d2",
          "url": "https://github.com/bcgit/bc-java/commit/faf5daa6e9b8460f862afc0af1cc0da365f7d4d2"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59651",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59651"
        }
      ],
      "release_date": "2026-08-03T00:41:23.578000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a mitigation for this flaw other than updating the affected Bouncy Castle component to a fixed version (bc-java 1.85 or LTS 2.73.12) once available for the affected product.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystore"
    },
    {
      "cve": "CVE-2026-59903",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests"
      },
      "discovery_date": "2026-08-17T18:11:22.687313+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517538"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. The `CorsHandler` component incorrectly replaces application `Vary` headers, such as `Authorization` or `Cookie`, with `Origin`. This allows a caching proxy or Content Delivery Network (CDN) to reuse authenticated responses across different users, leading to the disclosure of sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact information disclosure flaw in Netty arises from the `CorsHandler` incorrectly overwriting application `Vary` headers with `Origin`. This could allow caching proxies or CDNs to reuse authenticated responses across different users, potentially exposing sensitive data. Exploitation requires the presence of a caching proxy or CDN in front of the affected Netty application.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59903"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517538",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517538"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59903",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59903"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59903",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59903"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/pull/17213",
          "url": "https://github.com/netty/netty/pull/17213"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/pull/17217",
          "url": "https://github.com/netty/netty/pull/17217"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.137.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.137.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.17.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.17.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46"
        }
      ],
      "release_date": "2026-08-17T17:56:28.726000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite"
    },
    {
      "cve": "CVE-2026-64958",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-06T11:10:52.818986+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511978"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. This vulnerability allows a remote attacker to perform a denial of service (DoS) attack by sending a message with an excessive number of attachment headers. This can lead to the affected system becoming unresponsive or unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.cxf/cxf: Apache CXF: Denial of service via many attachment headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important rather than Moderate because an unauthenticated remote attacker can exhaust application server resources without requiring elevated privileges or interaction from users. In environments running Red Hat Enterprise Application Platform, JBoss Web Server, or Apache Camel, endpoints configured to parse multipart MIME payloads process incoming requests that include excessive attachment metadata, triggering resource depletion and availability loss. The lack of operational boundaries or access restrictions on public web service endpoints elevates the operational severity across deployed server instances.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64958"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511978",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511978"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64958",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64958"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64958",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64958"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/trsnkxc2f21585zlt819blvchgl6oykb",
          "url": "https://lists.apache.org/thread/trsnkxc2f21585zlt819blvchgl6oykb"
        }
      ],
      "release_date": "2026-08-06T10:13:04.069000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.cxf/cxf: Apache CXF: Denial of service via many attachment headers"
    },
    {
      "cve": "CVE-2026-65432",
      "cwe": {
        "id": "CWE-611",
        "name": "Improper Restriction of XML External Entity Reference"
      },
      "discovery_date": "2026-08-06T11:11:01.246333+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511981"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. The framework\u0027s initial processing of a Web Services Description Language (WSDL) document disables XML DTDs (Document Type Definitions) and external entities. However, any WSDL or XML Schema Definition (XSD) documents imported by the top-level WSDL are processed by a different component, WSDL4J, which does not apply these same security protections. This oversight allows an attacker to exploit XML External Entity (XXE) vulnerabilities through imported WSDL/XSD content, potentially leading to information disclosure or denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache CXF: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Apache CXF is affected by an XML External Entity (XXE) vulnerability when processing imported WSDL/XSD content. The vulnerability exists because WSDL4J, which Apache CXF uses to parse WSDL imports, lacks restrictions on DTD declarations and external entity references. An attacker can exploit this to read arbitrary files or conduct denial of service attacks. Note that this requires the application to process untrusted WSDL/XSD imports and have the WSDL4J library on the classpath.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511981",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511981"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65432"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/5qs207krzg51jl3zs3cvnl5lt9njp8c3",
          "url": "https://lists.apache.org/thread/5qs207krzg51jl3zs3cvnl5lt9njp8c3"
        }
      ],
      "release_date": "2026-08-06T10:26:12.142000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Update Apache CXF to a version that includes the fix. Disable DTD processing and external entity resolution in XML parsers. Avoid processing untrusted WSDL/XSD imports.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache CXF: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing"
    },
    {
      "cve": "CVE-2026-65583",
      "cwe": {
        "id": "CWE-303",
        "name": "Incorrect Implementation of Authentication Algorithm"
      },
      "discovery_date": "2026-08-06T11:51:55.926721+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511995"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. The OpenID Connect (OIDC) relying-party token validation in Apache CXF could accept specially crafted self-issued ID tokens. This bypasses necessary claim checks, such as issuer, subject, audience, and time, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by presenting a malicious token.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.cxf/cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact: IMPORTANT. A flaw was found in Apache CXF\u0027s OpenID Connect (OIDC) relying-party token validation. When the validator is configured to accept self-issued ID tokens, which is not the default behavior, required claim checks \u2014 issuer, subject, audience, and time, as well as the sub_jwk binding \u2014 are not enforced. A remote, unauthenticated attacker able to reach an affected OIDC relying party could present a specially crafted self-issued ID token to bypass authentication and gain unauthorized access, with high impact to confidentiality and integrity. Red Hat products that bundle affected versions of Apache CXF are tracked with delegated resolution: a fix is being pursued for the affected Red Hat JBoss Web Server and Red Hat build of Apache Camel streams, while the JBoss Enterprise Application Platform XP stream was determined not affected (component not present in the shipped configuration) and no fix is planned for the EAP 7.4 stream. The Red Hat severity of IMPORTANT (CVSS 7.4, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) is lower than the CISA score of 9.1 because exploitation requires a non-default configuration in which the relying-party validator accepts self-issued ID tokens.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65583"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511995",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511995"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65583",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65583"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65583",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65583"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j",
          "url": "https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j"
        }
      ],
      "release_date": "2026-08-06T11:23:17.421000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Keep the default behavior of the Apache CXF OIDC relying-party token validator: self-issued ID tokens are not accepted by default, so deployments that have not enabled their acceptance are not exposed to this authentication bypass. Deployments that have enabled acceptance of self-issued ID tokens can mitigate the issue by disabling that configuration. As a longer-term resolution, upgrading to an upstream Apache CXF version containing the fix (4.2.3, 4.1.8, or 3.6.12, as recommended in the Apache advisory) is advised.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.cxf/cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens"
    },
    {
      "cve": "CVE-2026-66909",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-08-06T11:11:08.945917+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511983"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. The Java Message Service (JMS) transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service\u0027s JMS destination. This vulnerability could lead to a denial of service or, in certain configurations, enable remote code execution on the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.cxf/cxf: Apache CXF: Remote Code Execution via unsafe deserialization of JMS ObjectMessage",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Apache CXF\u0027s JMS transport is rated as Important because it allows for remote code execution or denial of service if an attacker can send a specially crafted JMS ObjectMessage to a service. This is particularly relevant in Red Hat environments where Apache CXF is used in applications that process JMS messages, as the default deserialization behavior without type restrictions increases the attack surface. Exploitation requires the presence of a suitable gadget class on the classpath.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66909"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511983",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511983"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66909",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66909"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66909",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66909"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lr5d4tg6tf7j29jmw8wt242oowonjqpx",
          "url": "https://lists.apache.org/thread/lr5d4tg6tf7j29jmw8wt242oowonjqpx"
        }
      ],
      "release_date": "2026-08-06T10:23:23.571000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, disable ObjectMessage deserialization in Apache CXF\u0027s JMS transport. This can typically be achieved through a configuration setting provided by the Apache CXF framework. Consult the Apache CXF documentation for specific instructions on how to disable ObjectMessage deserialization in your deployment. Disabling this feature may impact applications that rely on ObjectMessage for legitimate data transfer.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.cxf/cxf: Apache CXF: Remote Code Execution via unsafe deserialization of JMS ObjectMessage"
    },
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-75595",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "discovery_date": "2026-08-19T21:20:58.535091+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519953"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. An unauthenticated remote attacker can exploit fragmented Transport Layer Security (TLS) ClientHello messages to bypass the Server Name Indication (SNI) routing mechanism. This forces a fallback to a less secure default SslContext, allowing the attacker to bypass mutual TLS authentication requirements and gain unauthorized access to protected resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in Netty that allows an unauthenticated remote attacker to bypass mutual TLS authentication. Applications that use Netty and rely solely on SNI-based clientAuth=REQUIRE for access control, without additional application-layer certificate verification, are vulnerable when an attacker exploits fragmented TLS ClientHello messages to force a fallback to a less secure default SslContext. Deployments that enforce clientAuth=REQUIRE uniformly across all SslContexts, or that perform secondary certificate verification at the application layer, are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75595"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519953",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519953"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75595",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75595"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75595",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75595"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7",
          "url": "https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961",
          "url": "https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/pull/17213",
          "url": "https://github.com/netty/netty/pull/17213"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/pull/17217",
          "url": "https://github.com/netty/netty/pull/17217"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.137.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.137.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.17.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.17.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5"
        }
      ],
      "release_date": "2026-08-19T21:00:27.627000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that application-layer certificate verification is implemented for services utilizing Netty with mutual TLS. This provides an additional layer of authentication beyond the TLS handshake, preventing unauthorized access even if the SNI routing is bypassed and a less restrictive default SslContext is used.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext"
    },
    {
      "cve": "CVE-2026-84375",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition"
      },
      "discovery_date": "2026-09-01T21:51:30.205823+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
          "url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
          "url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
          "url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/pull/797",
          "url": "https://github.com/nodeca/js-yaml/pull/797"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
        }
      ],
      "release_date": "2026-09-01T21:43:13.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
    },
    {
      "cve": "CVE-2026-84725",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-09-02T03:47:24.598000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527228"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "when EAP runs with -secmgr, the openjdk-orb\u0027s JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openjdk-orb: Incomplete fix for CVE-2026-15560,unauthed class loading via IIOP in EAP",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because unauthenticated remote attackers can trigger arbitrary class loading within the server JVM before access controls are evaluated. Although the issue requires specific deployment conditions\u2014namely running JBoss EAP under the Java Security Manager with an externally accessible IIOP service\u2014successful exploitation allows remote code execution. Deployments that restrict exposure of the IIOP transport to trusted networks experience significantly reduced risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84725"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527228",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527228"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84725",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84725"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84725",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84725"
        }
      ],
      "release_date": "2026-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, restrict access to the IIOP service (TCP port 3528) to trusted networks using firewall rules, or disable the IIOP subsystem if CORBA is not required by deployed applications.\n\nTo restrict or remove external access to port 3528 using firewalld:\n```\nfirewall-cmd --permanent --remove-port=3528/tcp\nfirewall-cmd --reload\n```\n\nWarning: Reloading the firewall configuration may briefly interrupt network traffic. If removing the iiop-openjdk subsystem from the JBoss EAP configuration (standalone.xml or domain.xml), a full server restart is required, causing temporary service downtime.\n\nCaveats: Blocking port 3528 or disabling the IIOP subsystem will prevent legitimate remote clients from communicating over IIOP/CORBA.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openjdk-orb: Incomplete fix for CVE-2026-15560,unauthed class loading via IIOP in EAP"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Shirshak Roy",
            "Rajivarnan R"
          ],
          "organization": "SECNORA"
        }
      ],
      "cve": "CVE-2026-85634",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory"
      },
      "discovery_date": "2026-09-04T11:46:02.455000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2528476"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker with the Deployer RBAC role can use path traversal sequences to access files outside the restricted deployment directory. This can allow the attacker to delete arbitrary directories or create files with arbitrary content, leading to a full privilege escalation to the management SuperUser role.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-core: wildfly-core: Deployer RBAC role privilege escalation via path traversal in deployment name",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it allows for privilege escalation from a restricted role to full administrative control. Successful exploitation allows an attacker to delete arbitrary directories and create files with arbitrary content, such as replacing the management credential store. The vulnerability root cause is a missing containment check in the ContentRepositoryImpl.copyExplodedContent function allowing path traversal via unsanitized deployment names.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-85634"
        },
        {
          "category": "external",
          "summary": "RHBZ#2528476",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528476"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-85634",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-85634"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85634",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85634"
        }
      ],
      "release_date": "2026-10-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wildfly-core: wildfly-core: Deployer RBAC role privilege escalation via path traversal in deployment name"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Yu Bao"
          ],
          "organization": "PayPal Cyber Security Team"
        }
      ],
      "cve": "CVE-2026-89058",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-08-19T17:06:00.368000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519775"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy\u0027s CorsFilter, which, when configured to allow all origins (\"*\"), reflects the request\u0027s Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-origin policy allows a malicious website to make credentialed cross-origin requests and read authenticated responses from a victim\u0027s session, resulting in a loss of confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89058"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519775",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519775"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89058",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89058"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89058",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89058"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/commit/efeb2b7",
          "url": "https://github.com/resteasy/resteasy/commit/efeb2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/security/advisories/GHSA-972r-f3fv-whm3",
          "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-972r-f3fv-whm3"
        }
      ],
      "release_date": "2026-09-17T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Yu Bao"
          ],
          "organization": "PayPal Cyber Security Team"
        }
      ],
      "cve": "CVE-2026-89059",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-08-19T16:21:31.345000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy\u0027s IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enormous dimensions to trigger a very large memory allocation, exhausting the JVM heap and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important severity because an unauthenticated remote caller can trigger complete service disruption across affected Java virtual machines with minimal network traffic. While RESTEasy is widely integrated into Red Hat enterprise runtimes, exploitation is restricted to application endpoints explicitly configured to ingest image MIME types using the Java Image I/O provider. Deployments that do not expose REST endpoints binding IIOImage or handling arbitrary image uploads are not susceptible to this denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89059"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89059",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89059"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89059",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89059"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/commit/7c7e6b37c8b2451a37aed9cdc6978b447456bacb",
          "url": "https://github.com/resteasy/resteasy/commit/7c7e6b37c8b2451a37aed9cdc6978b447456bacb"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/security/advisories/GHSA-m4pc-7gc7-9vw2",
          "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-m4pc-7gc7-9vw2"
        }
      ],
      "release_date": "2026-09-17T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)"
    },
    {
      "cve": "CVE-2026-93488",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-10T00:39:48+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536887"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAX_VALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYN_STREAM frames with FLAG_FIN=0, causing unbounded heap and direct memory allocation that can lead to JVM OutOfMemoryError and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in Netty\u0027s SpdySessionHandler that could allow a remote attacker to exhaust system resources by sending a large number of SPDY SYN_STREAM frames. This can lead to an OutOfMemoryError and crash the affected service, impacting availability. The default configuration allows for an unlimited number of concurrent streams, making services using Netty with SPDY vulnerable to this resource exhaustion attack.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536887",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536887"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93488"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.138.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.138.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.18.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.18.Final"
        }
      ],
      "release_date": "2026-09-10T00:39:48+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streams"
    },
    {
      "cve": "CVE-2026-93491",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-10T00:40:47+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536891"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholding reads. This action causes the methodOverflowQueue to grow without limit, leading to unbounded heap memory consumption and a denial of service due to memory exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Netty\u0027s HttpServerCodec component. A remote, unauthenticated attacker can exploit this flaw by sending a series of pipelined HTTP/1.1 requests without reading responses, leading to unbounded memory growth and potential service unavailability in applications utilizing affected Netty versions. The issue stems from an unbounded queue used to track pipelined requests, which can be exhausted by a malicious client.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93491"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536891",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536891"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93491"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.138.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.138.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.18.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.18.Final"
        }
      ],
      "release_date": "2026-09-10T00:40:47+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queue"
    },
    {
      "cve": "CVE-2026-93558",
      "cwe": {
        "id": "CWE-1035",
        "name": "CWE-1035"
      },
      "discovery_date": "2026-09-10T00:42:37+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536932"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s WebSocketServerExtensionHandler. A remote, unauthenticated attacker can exploit this vulnerability by using HTTP/1.1 pipelining to send requests faster than the application can respond. This leads to an unbounded growth of a per-connection queue, consuming excessive memory. Eventually, this can cause the Java Virtual Machine (JVM) to exhaust its heap, resulting in a Denial of Service (DoS) for the affected server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Netty\u0027s `WebSocketServerExtensionHandler`. A remote, unauthenticated attacker can exploit unbounded queue growth by sending pipelined HTTP/1.1 requests to a server supporting WebSocket compression. This can lead to JVM heap exhaustion and a denial of service, as memory is not reclaimed until the connection closes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93558"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536932",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536932"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93558",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93558"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93558",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93558"
        }
      ],
      "release_date": "2026-09-10T00:42:37+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "See https://github.com/netty/netty/security/advisories/GHSA-2g37-3h88-55hc for fixed versions and remediation guidance.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service"
    },
    {
      "cve": "CVE-2026-93562",
      "cwe": {
        "id": "CWE-1035",
        "name": "CWE-1035"
      },
      "discovery_date": "2026-09-10T00:45:54+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536951"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls or accessing unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in Netty\u0027s HTTP/1 decoder allows HTTP request smuggling by incorrectly validating `Transfer-Encoding` headers. This can enable an attacker to inject arbitrary HTTP requests, primarily impacting Red Hat products deployed in environments with parser-differential proxies or load balancers, such as Red Hat AMQ, JBoss Fuse, Enterprise Application Platform, and Red Hat Build of Quarkus. The vulnerability arises from an incomplete fix, making it crucial to ensure consistent HTTP parsing across all network components.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93562"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536951",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536951"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93562",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93562"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93562",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93562"
        }
      ],
      "release_date": "2026-09-10T00:45:54+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "See https://github.com/netty/netty/security/advisories/GHSA-hcvj-94mj-jp5c for fixed versions and remediation guidance.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling"
    },
    {
      "cve": "CVE-2026-93565",
      "cwe": {
        "id": "CWE-1035",
        "name": "CWE-1035"
      },
      "discovery_date": "2026-09-10T00:47:19+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536952"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol (RTSP) requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. This vulnerability allows an attacker to bypass method-based access controls and can also be used to launder malicious requests through Netty-based RTSP proxies, making them appear legitimate to backend systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw affecting Netty-based RTSP servers and proxies. The `RtspDecoder` component incorrectly strips trailing control bytes from RTSP method tokens, allowing an attacker to bypass method-based access controls. This can lead to unauthorized actions or proxy laundering, where a malformed request is normalized and forwarded as legitimate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93565"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536952",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536952"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93565",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93565"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93565",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93565"
        }
      ],
      "release_date": "2026-09-10T00:47:19+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "See https://github.com/netty/netty/security/advisories/GHSA-h75q-xqrh-59rf for fixed versions and remediation guidance.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte"
    },
    {
      "cve": "CVE-2026-93566",
      "cwe": {
        "id": "CWE-1035",
        "name": "CWE-1035"
      },
      "discovery_date": "2026-09-10T00:47:37+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536954"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control characters within the chunk-size line. This bypasses the intended strict validation, allowing the attacker to inject arbitrary HTTP requests. This vulnerability can lead to HTTP request smuggling, potentially resulting in information disclosure or other unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to control characters in the chunk-size line",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in Netty\u0027s HTTP codec allows HTTP request smuggling. The vulnerability stems from improper validation of chunk size lines, enabling an attacker to inject arbitrary HTTP requests. This could lead to cache poisoning or bypassing security controls in Red Hat products that use affected Netty components and process untrusted HTTP traffic.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93566"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536954",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536954"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93566",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93566"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93566",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93566"
        }
      ],
      "release_date": "2026-09-10T00:47:37+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "See https://github.com/netty/netty/security/advisories/GHSA-rq4j-fc47-9698 for fixed versions and remediation guidance.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to control characters in the chunk-size line"
    },
    {
      "cve": "CVE-2026-93573",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests"
      },
      "discovery_date": "2026-09-10T00:52:26+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536964"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass `Transfer-Encoding` header validation by splitting the `Transfer-Encoding` field across multiple headers, with the last field containing a non-final transfer coding like `gzip` or `deflate`. This bypass can lead to HTTP request smuggling, enabling attackers to bypass security controls, desynchronize request processing, or cause requests to be processed in an unintended context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in Netty\u0027s HTTP/1.1 decoder allows for HTTP request smuggling by incorrectly processing split `Transfer-Encoding` headers. When Netty is deployed with an intermediary that interprets these headers differently, an attacker could bypass front-end security controls or desynchronize request processing.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93573"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536964",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536964"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93573",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93573"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93573",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93573"
        }
      ],
      "release_date": "2026-09-10T00:52:26+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "See https://github.com/netty/netty/security/advisories/GHSA-3jrc-fchc-59pw for fixed versions and remediation guidance.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling"
    },
    {
      "cve": "CVE-2026-93574",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests"
      },
      "discovery_date": "2026-09-10T00:52:52+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2536966"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect parsing of the chunk size can lead to HTTP request smuggling. This allows an attacker to bypass security controls or access unauthorized resources in proxy/backend deployments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: HTTP request smuggling via post-digit whitespace in chunk-size parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate severity flaw in Netty\u0027s HTTP/1.1 chunk-size parsing allows for HTTP request smuggling in proxy/backend deployments. By accepting post-digit whitespace in chunk-size tokens, Netty can misinterpret malformed chunked bodies, leading to a desynchronization between Netty and other HTTP components in the request path. This could enable an attacker to smuggle requests, potentially bypassing security controls or accessing unauthorized resources.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93574"
        },
        {
          "category": "external",
          "summary": "RHBZ#2536966",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536966"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93574",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93574"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93574",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93574"
        }
      ],
      "release_date": "2026-09-10T00:52:52+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "See https://github.com/netty/netty/security/advisories/GHSA-j4mg-hqgv-34qc for fixed versions and remediation guidance.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: HTTP request smuggling via post-digit whitespace in chunk-size parsing"
    },
    {
      "cve": "CVE-2026-100655",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-26T13:36:58.243086+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2541863"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by exhausting server memory. Because the SPDY session handler does not restrict the number of concurrent streams initiated by a remote peer, an attacker can transmit an excessive volume of stream creation requests over a connection, triggering memory exhaustion and crashing the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Denial of Service via unbounded SPDY concurrent streams",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having an Important impact because an unauthenticated remote attacker can exhaust system memory and induce a denial of service, crashing the entire Java Virtual Machine without requiring prior privileges. Within Red Hat offerings, Netty is primarily utilized as an underlying networking transport framework across various middleware, developer tools, and containerized services. The exposure is limited to deployments and services where SPDY protocol handlers are actively integrated into the communication pipeline, as default HTTP configurations do not process these sessions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-100655"
        },
        {
          "category": "external",
          "summary": "RHBZ#2541863",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541863"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-100655",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100655"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100655",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100655"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-rmcw-9fcq-wjq7",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-rmcw-9fcq-wjq7"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/netty-before-4.1.138-final-denial-of-service-via-spdysessionhandler",
          "url": "https://www.vulncheck.com/advisories/netty-before-4.1.138-final-denial-of-service-via-spdysessionhandler"
        }
      ],
      "release_date": "2026-09-26T13:23:23.988000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Denial of Service via unbounded SPDY concurrent streams"
    },
    {
      "cve": "CVE-2026-100656",
      "discovery_date": "2026-09-26T13:31:00.195177+00:00",
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending numerous pipelined HTTP/1.1 requests over a single connection while withholding reads. Netty\u0027s HTTP server codec stores unanswered requests in an internal queue without a size limit, leading to excessive memory consumption and an eventual application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated network attacker can trigger an application-wide denial of service through memory exhaustion without needing prior credentials or complex preconditions. In Red Hat environments, Netty is widely bundled as an underlying network engine across middleware and containerized offerings, including Red Hat Build of Keycloak, Quarkus, and JBoss EAP. When HTTP/1.1 services accept pipelined requests, a malicious client can continuously send incoming queries over an individual connection while intentionally pausing consumption of server responses, consuming system heap until the Java virtual machine crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-100656"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-100656",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100656"
        }
      ],
      "release_date": "2026-09-26T13:23:24.703000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Denial of Service via unbounded queue growth during HTTP request pipelining"
    },
    {
      "cve": "CVE-2026-100666",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests"
      },
      "discovery_date": "2026-09-26T13:41:45.877343+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2541907"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s HttpServerCodec. A remote attacker can exploit this vulnerability to cause HTTP response desynchronization, leading to response splitting and potential information disclosure. By sending pipelined requests with informational headers followed by another request, the server misaligns outbound responses with queued inbound requests. Consequently, response data can be associated with the wrong request on reused connections, leading to the delivery of unintended content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Netty\u0027s HttpServerCodec where processing pipelined HTTP/1.1 requests with 1xx informational responses causes HTTP response desynchronization. When a client sends a GET request with an \u0027Expect: 100-continue\u0027 header followed by a HEAD request, the server misaligns outbound responses with inbound requests, resulting in response splitting and unsafe connection reuse. This can lead to unintended information disclosure on reused connections.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-100666"
        },
        {
          "category": "external",
          "summary": "RHBZ#2541907",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541907"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-100666",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100666"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100666",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100666"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-2g6j-r8q9-5hr8",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-2g6j-r8q9-5hr8"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/netty-4.2.0-through-4.2.17-response-desynchronization-via-httpservercodec",
          "url": "https://www.vulncheck.com/advisories/netty-4.2.0-through-4.2.17-response-desynchronization-via-httpservercodec"
        }
      ],
      "release_date": "2026-09-26T13:23:31.961000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "Update to io.netty:netty-codec-http version 4.2.17.Final or 4.1.137.Final or later, which fixes the response queue management in HttpServerCodec to properly pair responses with their originating requests.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec"
    },
    {
      "cve": "CVE-2026-114488",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2026-06-23T02:49:58.722000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level authentication, allowing a pre-auth attacker on the port 3528 to impersonate any principal on every IIOP-exposed @Remote EJB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Wildfly: wildfly-iiop: wildfly-ejb3: Wildfly: Authentication bypass on IIOP EJB invocations as CSIv2 ITTPrincipalName accepted without transport binding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate severity rather than Important because successful exploitation requires non-default configuration settings. In standard Red Hat JBoss Enterprise Application Platform configurations, caller propagation over the IIOP subsystem is set to \u0027none\u0027 by default, preventing unauthenticated principal assertion. Deployments become susceptible only if an administrator or application deployment explicitly enables caller propagation without enforcing client mutual TLS or mandatory authentication context. When those specific conditions are met, an unauthorized remote client communicating over the IIOP port could invoke remote enterprise beans under an assumed identity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 8.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-114488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-114488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-114488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-114488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114488"
        }
      ],
      "release_date": "2026-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-06T15:31:53+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95887"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability without modifying binaries, apply one or more of the following operational and configuration controls:\n\n1. Maintain or revert caller propagation to the default \u0027none\u0027 setting in the IIOP subsystem configuration:\nRun the following management CLI command:\n`/subsystem=iiop-openjdk:write-attribute(name=caller-propagation,value=none)`\nEnsure that application deployment descriptors (such as jboss-ejb3.xml) do not explicitly override caller propagation to \u0027supported\u0027.\n\n2. Restrict network reachability:\nBlock external access to the CORBA/IIOP port (default TCP port 3528) using firewall rules, or restrict access strictly to trusted application networks:\n`firewall-cmd --remove-port=3528/tcp --permanent \u0026\u0026 firewall-cmd --reload`\n\n3. Enforce transport-level security:\nIf caller propagation is required for your architecture, configure the IIOP subsystem to require SSL/TLS with client certificate authentication by setting `server-requires-ssl=\"true\"`, or enforce mandatory authentication via the `as-context` configuration.\n\nCaveats:\nDisabling caller propagation prevents client security identity forwarding across remote IIOP EJB calls, which may impact applications relying on distributed identity propagation. Restricting firewall access will prevent external clients outside authorized networks from connecting to IIOP services.\n\nWarning:\nApplying configuration changes via the JBoss management CLI requires reloading the runtime service (`:reload`), which will temporarily interrupt active client connections.",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 8.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Wildfly: wildfly-iiop: wildfly-ejb3: Wildfly: Authentication bypass on IIOP EJB invocations as CSIv2 ITTPrincipalName accepted without transport binding"
    }
  ]
}