Search: CVE-2026-2673

Red Hat JBoss Web Server 6.2.4 is a security update that addresses multiple vulnerabilities in its Apache Tomcat components and OpenSSL. The update fixes issues including HTTP/2 header validation, authentication bypass, information disclosure, denial of service, improper authorization, and unexpected key agreement group selection in TLS 1.3. These vulnerabilities could allow attackers to bypass security controls, disclose sensitive information, or cause service disruption. The update replaces version 6.2.3 and includes bug fixes and component upgrades.