Read the docs
Red Hat Security Advisory

RHSA-2026:70421

Red Hat JBoss Enterprise Application Platform 8.1.8 XP 6.0.6.GA release

Released 2026-09-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2026-40972 CVE-2026-56819 · GHSA-93wv-jw9v-4972

Uncontrolled resource consumption in netty

Priority HIGH 72

Netty is a network application framework for development of protocol servers and clients.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00665 Published 2026-07-21 Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority MEDIUM 40

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00792 Published 2026-06-09 Partial fix · 1.16.5.1, 1.15.11.1 +7 CWE-400
Priority MEDIUM 40

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00631 Published 2026-06-09 Partial fix · 1.16.5.1, 1.15.11.1 +2 CWE-400
Priority LOW 35

In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00197 Published 2026-07-14 Partial fix CWE-200