Read the docs
Red Hat Security Advisory

RHSA-2026:5482

Red Hat JBoss Enterprise Application Platform 8.1.5 XP 6.0.3.GA release

Released 2026-03-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority HIGH 70

The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00384 Published 2026-01-15 Partial fix · 4.5.24, 5.0.7 CWE-444