Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release
A moderate severity vulnerability (CVE-2026-35554) affects Apache Kafka Clients used within Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA. The issue involves information disclosure and data corruption caused by a race condition in the producer buffer management. Red Hat has released a cumulative patch update addressing this vulnerability. Users should apply this update after ensuring all previous errata are installed and backing up their systems.
AI Analysis
Technical Summary
CVE-2026-35554 is a vulnerability in Apache Kafka Clients integrated into Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA. It arises from a race condition in the producer buffer management, leading to potential information disclosure and data corruption. Red Hat issued a cumulative patch release (JBoss EAP XP 6.0.5) to fix this issue. The advisory recommends applying this update after prior errata are applied and backing up existing installations. No CVSS score is provided in the advisory.
Potential Impact
The vulnerability can cause information disclosure and data corruption within the Kafka client component of the affected JBoss EAP runtime. This could affect applications relying on Kafka producer buffers, potentially exposing sensitive data or corrupting data streams. The severity is rated moderate by Red Hat.
Mitigation Recommendations
A cumulative patch release (JBoss EAP XP 6.0.5.GA) addressing this vulnerability is available. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. Back up all applications, configuration files, databases, and settings before updating. Follow Red Hat's official update instructions at https://access.redhat.com/articles/11258. No other mitigation or temporary fix is indicated.
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release
Description
A moderate severity vulnerability (CVE-2026-35554) affects Apache Kafka Clients used within Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA. The issue involves information disclosure and data corruption caused by a race condition in the producer buffer management. Red Hat has released a cumulative patch update addressing this vulnerability. Users should apply this update after ensuring all previous errata are installed and backing up their systems.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-35554 is a vulnerability in Apache Kafka Clients integrated into Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA. It arises from a race condition in the producer buffer management, leading to potential information disclosure and data corruption. Red Hat issued a cumulative patch release (JBoss EAP XP 6.0.5) to fix this issue. The advisory recommends applying this update after prior errata are applied and backing up existing installations. No CVSS score is provided in the advisory.
Potential Impact
The vulnerability can cause information disclosure and data corruption within the Kafka client component of the affected JBoss EAP runtime. This could affect applications relying on Kafka producer buffers, potentially exposing sensitive data or corrupting data streams. The severity is rated moderate by Red Hat.
Mitigation Recommendations
A cumulative patch release (JBoss EAP XP 6.0.5.GA) addressing this vulnerability is available. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. Back up all applications, configuration files, databases, and settings before updating. Follow Red Hat's official update instructions at https://access.redhat.com/articles/11258. No other mitigation or temporary fix is indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:42098
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a5e79f42a4a8d59899cc15c
Added to database: 07/20/2026, 19:41:40 UTC
Last enriched: 07/20/2026, 19:50:21 UTC
Last updated: 07/21/2026, 05:54:34 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.