Red Hat JBoss Enterprise Application Platform 8 vulnerabilities

Product

Red Hat JBoss Enterprise Application Platform 8

by Red Hat · last CVE Oct 29, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 4High 24Medium 15Low 5

Severity

Exploitation

Watch

Add Red Hat JBoss Enterprise Application Platform 8 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-2733	3.8	0%	Feb 19	Org.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocol Affected: All versions, or not specified
CVE-2026-114370	3.7	0%	Oct 21	Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal Affected: All versions, or not specified
CVE-2026-0976	3.7	0%	Jan 15	Org.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of matrix parameters in url paths Affected: All versions, or not specified
CVE-2026-4874	3.1	0%	Mar 26	Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation Affected: All versions, or not specified
CVE-2026-1190	3.1	0%	Jan 26	Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata Affected: All versions, or not specified