What’s Vulnerable › Products
Red Hat JBoss Enterprise Application Platform 8.1.8.GA vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Red Hat JBoss Enterprise Application Platform 8.1.8.GA version is affected
Latest Red Hat JBoss Enterprise Application Platform 8.1.8.GA vulnerabilities
- CVE-2026-85511 — Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2 (CVSS 4.2)
- CVE-2026-10832 — Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload (CVSS 5.9)
- CVE-2026-86404 — Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default (CVSS 8.8)
- CVE-2026-5680 — Undertow-core: undertow: denial of service via websocket permessage-deflate processing (CVSS 7.5)
- CVE-2026-14180 — Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap (CVSS 5.3)
- CVE-2026-15567 — Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener (CVSS 7.5)
- CVE-2026-15565 — Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method (CVSS 7.5)
- CVE-2026-15563 — Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos (CVSS 7.4)
- CVE-2026-15562 — Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service (CVSS 7.5)
- CVE-2026-15561 — Undertow-core: oom via missing limits in chunked trailer in eap's undertow (CVSS 7.5)
- CVE-2026-15560 — Openjdk-orb: unauthed class loading via iiop in eap (CVSS 8.1)
- CVE-2026-15555 — Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller (CVSS 8.8)
- CVE-2026-15554 — Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery (CVSS 7.4)