Skip to main content
CVE-2026-4800VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat Data Grid 8.6.1 security update

Affects Red HatSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 30 Oct 2026, 06:15 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 2 Jun 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

AI-suggested

Red Hat has released Data Grid version 8.6.1 which includes fixes for all listed vulnerabilities. Users should update to Red Hat Data Grid 8.6.1 to mitigate these security issues. Before applying this update, ensure all previously released errata relevant to your system have been applied. Follow Red Hat's official guidance for applying updates as detailed in their advisory.

Description

Red Hat Data Grid 8.6.1 includes multiple security fixes addressing vulnerabilities in various components such as Netty, Axios, Spring Boot, lodash, DOMPurify, and Apache Log4j. These vulnerabilities range from denial of service, request smuggling, authentication bypass, arbitrary code execution, cross-site scripting, to information disclosure. The update replaces version 8.6.0 and is rated as having an important security impact by Red Hat.

References

Community reviews

Loading reviews…