Skip to content
OpenAdvisories
Critical RHSA-2026:99018 21 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

Published Nov 13, 2026 · Updated Nov 14, 2026

Ecosystem: Red Hat

Fixed packages 116

ReleasePackageFixed in
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-apache-sshd 0:2.20.0-1.redhat_00002.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-bouncycastle 0:1.86.0-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-bouncycastle-jmail 0:1.86.0-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-bouncycastle-pg 0:1.86.0-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-bouncycastle-pkix 0:1.86.0-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-bouncycastle-prov 0:1.86.0-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-bouncycastle-util 0:1.86.0-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-eap-product-conf-parent 0:801.9.1-1.GA_redhat_00002.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-eap-product-conf-wildfly-ee-feature-pack 0:801.9.1-1.GA_redhat_00002.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-common-api 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-common-impl 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-common-spi 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-core-api 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-core-impl 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-deployers-common 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-jdbc 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ironjacamar-validator 0:3.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-datatype-jdk8 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-datatype-jsr310 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-jaxrs-base 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-jaxrs-json-provider 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-jaxrs-providers 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-module-jakarta-xmlbind-annotations 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-modules-base 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-jackson-modules-java8 0:2.18.11-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-mod_cluster 0:2.1.1-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-neethi 0:3.2.4-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly 0:8.1.9.1-1.GA_redhat_00006.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-http-client 0:2.1.5-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-http-client-common 0:2.1.5-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-http-ejb-client 0:2.1.5-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-http-naming-client 0:2.1.5-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-http-transaction-client 0:2.1.5-1.Final_redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-java-jdk21 0:8.1.9.1-1.GA_redhat_00006.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-javadocs 0:8.1.1-15.GA_redhat_00052.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-wildfly-modules 0:8.1.9.1-1.GA_redhat_00006.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el10 eap8-ws-commons-XmlSchema 0:2.3.3-1.redhat_00001.1.el10eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-apache-sshd 0:2.20.0-1.redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-bouncycastle 0:1.86.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-bouncycastle-jmail 0:1.86.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-bouncycastle-pg 0:1.86.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-bouncycastle-pkix 0:1.86.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-bouncycastle-prov 0:1.86.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-bouncycastle-util 0:1.86.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-eap-product-conf-parent 0:801.9.1-1.GA_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-eap-product-conf-wildfly-ee-feature-pack 0:801.9.1-1.GA_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-common-api 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-common-impl 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-common-spi 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-core-api 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-core-impl 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-deployers-common 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-jdbc 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ironjacamar-validator 0:3.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-datatype-jdk8 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-datatype-jsr310 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-jaxrs-base 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-jaxrs-json-provider 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-jaxrs-providers 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-module-jakarta-xmlbind-annotations 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-modules-base 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-jackson-modules-java8 0:2.18.11-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-mod_cluster 0:2.1.1-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-neethi 0:3.2.4-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-http-client 0:2.1.5-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-http-client-common 0:2.1.5-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-http-ejb-client 0:2.1.5-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-http-naming-client 0:2.1.5-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-http-transaction-client 0:2.1.5-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-java-jdk17 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-java-jdk21 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-javadocs 0:8.1.1-15.GA_redhat_00052.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-wildfly-modules 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el8 eap8-ws-commons-XmlSchema 0:2.3.3-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-apache-sshd 0:2.20.0-1.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-bouncycastle 0:1.86.0-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-bouncycastle-jmail 0:1.86.0-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-bouncycastle-pg 0:1.86.0-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-bouncycastle-pkix 0:1.86.0-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-bouncycastle-prov 0:1.86.0-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-bouncycastle-util 0:1.86.0-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-eap-product-conf-parent 0:801.9.1-1.GA_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-eap-product-conf-wildfly-ee-feature-pack 0:801.9.1-1.GA_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-common-api 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-common-impl 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-common-spi 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-core-api 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-core-impl 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-deployers-common 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-jdbc 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ironjacamar-validator 0:3.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-datatype-jdk8 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-datatype-jsr310 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-jaxrs-base 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-jaxrs-json-provider 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-jaxrs-providers 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-module-jakarta-xmlbind-annotations 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-modules-base 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jackson-modules-java8 0:2.18.11-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-mod_cluster 0:2.1.1-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-neethi 0:3.2.4-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-client 0:2.1.5-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-client-common 0:2.1.5-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-ejb-client 0:2.1.5-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-naming-client 0:2.1.5-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-transaction-client 0:2.1.5-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-java-jdk17 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-java-jdk21 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-javadocs 0:8.1.1-15.GA_redhat_00052.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-modules 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-ws-commons-XmlSchema 0:2.3.3-1.redhat_00001.1.el9eap

Vulnerabilities 21

  • Critical 9.1
    CVE-2026-77185

    Apache MINA SSHD: Asynchronous authentication can bypass signature verification

    Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server. Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of th…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • High 8.8
    CVE-2026-12977

    Org.wildfly.core/wildfly-server: wildfly: rbac bypass in wildfly deployment-operation handlers leads to privilege escalation

    A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files…

    Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat JBoss Enterprise Application Platform 7
  • High 8.7
    CVE-2026-12802

    CMS AuthEnvelopedData fails to enforce tag-length on decryption

    In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.1…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-58060

    HSS public-key level count unbounded, enabling huge allocation on verify

    In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) an…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-58061

    CCM-family modes write plaintext to caller buffer before tag check

    In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-59639

    CMS verifySignatures returns true for SignedData with zero signers

    In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-59642

    CMS AuthenticatedData content not bound to MAC when authAttrs present

    In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series),…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-59645

    OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

    In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcutil-fips 2.0.7 (2.0.X …

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-71889

    PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate

    In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.509 name constraints to the end-entity certificate. checkName…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu Wolfi
  • High 8.2
    CVE-2026-71887

    OpenPGP data signature accepted from a signing subkey without cross-certification

    In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no embedded Primary Key Binding (cross-certification) signature, in the case where that binding omits a…

    Legion of the Bouncy Castle BC-JAVA bouncycastle bouncycastle Debian Ubuntu Wolfi
  • High 8.1
    CVE-2026-93994

    Apache MINA SSHD: Repeated-publickey policy bypass on server

    Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshd_config Authe…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • High 7.5
    CVE-2026-102495

    Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes

    Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this…

    Apache Software Foundation Apache XMLSchema
  • High 7.5
    CVE-2026-102496

    Apache XMLSchema: Denial of service through deeply nested schema structures

    Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2…

    Apache Software Foundation Apache XMLSchema
  • High 7.5
    CVE-2026-68498

    jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service

    StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object property name can consume while being parsed, independently of the much larger maxStringLength (default 100,000,000 characters) that boun…

    FasterXML jackson-core jackson-core jackson-core Debian Ubuntu
  • High 7.5
    CVE-2026-89407

    jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS

    NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PAT…

    FasterXML jackson-core druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2026-89425

    jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth

    UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser impleme…

    FasterXML jackson-core druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2026-91777

    jackson-databind: quadratic forward-reference completion in Collection and Map deserializers

    Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolve…

    FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2026-91863

    Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

    A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser (denial of service). Users are recommended to upgrade to version 3.2.4, which fixes this issue.

    Apache Software Foundation Apache Neethi
  • High 7.5
    CVE-2026-91864

    Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion

    A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap (denial of service). Users are recommended to upgrade to version 3.2.…

    Apache Software Foundation Apache Neethi
  • High 7.5
    CVE-2026-91865

    Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service

    A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normalization, consuming huge amounts of CPU and memory (denial of service). Users are recommended to upgrade to version 3.2.4, …

    Apache Software Foundation Apache Neethi
  • High 7.5
    CVE-2026-91866

    Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service

    A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU for a long time (denial of service). Users are recommended to upgrade to version 3.2.4, which fixes this issue.

    Apache Software Foundation Apache Neethi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2491669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510204
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510224
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510254
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2538243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2538446
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2538720
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2538975
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2539034
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2539084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2539085
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543083
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543086
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543862
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2545496
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2545497
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554486
  • article
    https://issues.redhat.com/browse/JBEAP-35049
  • article
    https://issues.redhat.com/browse/JBEAP-35159
  • article
    https://issues.redhat.com/browse/JBEAP-35166
  • article
    https://issues.redhat.com/browse/JBEAP-35262
  • article
    https://issues.redhat.com/browse/JBEAP-35293
  • article
    https://issues.redhat.com/browse/JBEAP-35309
  • article
    https://issues.redhat.com/browse/JBEAP-35632
  • article
    https://issues.redhat.com/browse/JBEAP-35651
  • article
    https://issues.redhat.com/browse/JBEAP-35795
  • article
    https://issues.redhat.com/browse/JBEAP-36001
  • article
    https://issues.redhat.com/browse/JBEAP-36088
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99018.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-12802
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-12802
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-12802
  • article
    https://github.com/bcgit/bc-java/commit/0fefa539e6ac5c66e1daee5a13b23d1d4769cc01
  • article
    https://github.com/bcgit/bc-java/wiki/CVE-2026-12802