RH
Product
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
by Red Hat · last CVE Sep 18, 2026
43
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 27Medium 5Low 0
Watch

Add Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47691
10.0
0%
Jun 12
Netty has Insufficient Bailiwick Validation for NS Records
Affected: All versions, or not specified
CVE-2026-45674
10.0
0%
Jun 12
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Affected: All versions, or not specified
CVE-2026-42581
9.8
1%
May 13
Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Affected: All versions, or not specified
CVE-2026-27446
9.8
11%
Mar 4
Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation
Affected: All versions, or not specified
CVE-2026-27727
9.8
1%
Feb 25
mchange-commons-java: Remote Code Execution via JNDI Reference Resolution
Affected: All versions, or not specified
CVE-2025-12543
9.6
1%
Jan 7
Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf
Affected: All versions, or not specified
CVE-2026-42584
9.1
1%
May 13
Netty: HttpClientCodec response desynchronization
Affected: All versions, or not specified
CVE-2026-42579
9.1
1%
May 13
Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)
Affected: All versions, or not specified
CVE-2026-28369
9.1
1%
Mar 27
Undertow: undertow: request smuggling via malformed http request headers
Affected: All versions, or not specified
CVE-2026-28367
9.1
1%
Mar 27
Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
Affected: All versions, or not specified
CVE-2026-28368
9.1
1%
Mar 27
Undertow: undertow: request smuggling via inconsistent header parsing
Affected: All versions, or not specified
Showing 11