Red Hat JBoss Web Server 5 vulnerabilities | LiveThreat CVE Feed

Product

Red Hat JBoss Web Server 5

by Red Hat · last CVE Aug 19, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 3High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Red Hat JBoss Web Server 5 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-50628	9.8	1%	Jun 12	Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control Affected: All versions, or not specified
CVE-2026-49875	9.8	1%	Jun 12	Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils Affected: All versions, or not specified
CVE-2026-50627	9.1	5%	Jun 12	Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator Affected: All versions, or not specified
CVE-2026-29146	7.5	9%	Apr 9	Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default Affected: All versions, or not specified
CVE-2026-76166	4.3	1%	Aug 19	Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram Affected: All versions, or not specified