Login Request a demo
RH
Product
Red Hat Data Grid 8
by Red Hat · last CVE Oct 26, 2026
45
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 9High 21Medium 14Low 1
Severity
All severities45Critical9High21Medium14Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Red Hat Data Grid 8 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42581
9.8
1%
May 13
Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Affected: All versions, or not specified
CVE-2025-12543
9.6
1%
Jan 7
Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf
Affected: All versions, or not specified
CVE-2026-42584
9.1
1%
May 13
Netty: HttpClientCodec response desynchronization
Affected: All versions, or not specified
CVE-2026-42579
9.1
1%
May 13
Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)
Affected: All versions, or not specified
CVE-2026-40976
9.1
0%
Apr 27
In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints
Affected: All versions, or not specified
CVE-2026-33896
9.1
0%
Mar 27
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Affected: All versions, or not specified
CVE-2026-28369
9.1
1%
Mar 27
Undertow: undertow: request smuggling via malformed http request headers
Affected: All versions, or not specified
CVE-2026-28367
9.1
1%
Mar 27
Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
Affected: All versions, or not specified
CVE-2026-28368
9.1
1%
Mar 27
Undertow: undertow: request smuggling via inconsistent header parsing
Affected: All versions, or not specified
Showing 9