Red Hat JBoss EAP 7.4.25 Security Update: Deserialization and Pre-Auth DoS Fixes

access.redhat.com 2026-09-18 查看中文 →

Security Advisory RHSA-2026:53645 Unknown Red Hat

Affected:

Red Hat JBoss Enterprise Application Platform 7.4.25
Red Hat JBoss Enterprise Application Platform 7 for Red Hat Enterprise Linux 8

Fixed in:

Red Hat JBoss Enterprise Application Platform 7.4.25

Referenced CVEs: CVE-2026-86404 · 8.8 CVE-2026-15567 · 7.5 CVE-2026-15565 · 7.5 CVE-2026-15563 · 7.4 CVE-2026-15562 · 7.5 CVE-2026-15561 · 7.5 CVE-2026-15560 · 8.1 CVE-2026-15556 · 8.1 CVE-2026-15555 · 8.8 CVE-2026-15554 · 7.4

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from access.redhat.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

CVE-2026-84474: Critical RCE in Red Hat Ansible Automation Platform via X-Forwarded-For Spoofing 2026-09-24 CVE-2026-71459 DRF View IDOR Vulnerability Analysis and Fix 2026-09-24 RHSA-2026:69961: Podman Security Update Fixing Multiple Go Library CVEs (CVE-2026-33818, etc.) 2026-09-23 Red Hat Quarkus 3.27.5.SP2 Security Advisory: Fixes SQLi, SSRF, XSS, and DoS CVEs 2026-09-23 RHSA-2026:69440: Red Hat Quarkus 3.33.3.SP2 Security Update (SQLi/SSRF/CVE) 2026-09-23

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro