Red Hat Security Advisory

RHSA-2026:42098

Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release

Released 2026-07-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.0.5.GA org.apache.kafka.kafka-clients-3.9.2.redhat-00001-test.jar

TI-2026-27662 CVE-2026-35554 · GHSA-5qcv-4rpc-jp93

LOW 38

A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00454 Published 2026-04-07 Partial fix · 3.9.2, 4.0.2 +1 CWE-362