RH
Product
Red Hat Data Grid 8
45
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 9High 21Medium 14Low 1
Watch
Add Red Hat Data Grid 8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93569 | 8.2 | Sep 18 | Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority Affected: All versions, or not specified |
| CVE-2026-15573 | 8.1 | Aug 5 | Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher Affected: All versions, or not specified |
| CVE-2025-23368 | 8.1 | Mar 4 | Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli Affected: All versions, or not specified |
| CVE-2026-93568 | 7.5 | Sep 18 | Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests Affected: All versions, or not specified |
| CVE-2026-93567 | 7.5 | Sep 18 | Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority Affected: All versions, or not specified |
| CVE-2026-93565 | 7.5 | Sep 18 | Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte Affected: All versions, or not specified |
| CVE-2026-93558 | 7.5 | Sep 18 | Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service Affected: All versions, or not specified |
| CVE-2026-93491 | 7.5 | Sep 18 | Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue Affected: All versions, or not specified |
| CVE-2026-93488 | 7.5 | Sep 18 | Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams Affected: All versions, or not specified |
| CVE-2026-18212 | 7.5 | Sep 16 | Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state Affected: All versions, or not specified |
| CVE-2026-5680 | 7.5 | Aug 27 | Undertow-core: undertow: denial of service via websocket permessage-deflate processing Affected: All versions, or not specified |
| CVE-2026-15565 | 7.5 | Aug 11 | Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method Affected: All versions, or not specified |
| CVE-2026-13676 | 7.5 | Jun 29 | fast-uri vulnerable to host confusion via failed IDN canonicalization Affected: All versions, or not specified |
| CVE-2026-45736 | 7.5 | May 15 | ws: Uninitialized memory disclosure Affected: All versions, or not specified |
| CVE-2026-6321 | 7.5 | May 4 | fast-uri vulnerable to path traversal via percent-encoded dot segments Affected: All versions, or not specified |
| CVE-2026-33895 | 7.5 | Mar 27 | Forge has signature forgery in Ed25519 due to missing S > L check Affected: All versions, or not specified |
| CVE-2026-33894 | 7.5 | Mar 27 | Forge has signature forgery in RSA-PKCS due to ASN.1 extra field Affected: All versions, or not specified |
| CVE-2024-3884 | 7.5 | Dec 3 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded Affected: All versions, or not specified |
| CVE-2025-9784 | 7.5 | Sep 2 | Undertow: undertow madeyoureset http/2 ddos vulnerability Affected: All versions, or not specified |
| CVE-2024-7885 | 7.5 | Aug 21 | Undertow: improper state management in proxy protocol parsing causes information leakage Affected: All versions, or not specified |
| CVE-2026-19611 | 7.4 | Aug 20 | Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding Affected: All versions, or not specified |
Showing 21