Threats Tagged 'cve-2026-44417'

Red Hat JBoss Enterprise Application Platform 8.1.8 includes multiple security fixes addressing vulnerabilities such as denial of service, privilege escalation, authentication bypass, information disclosure, and remote code execution. These vulnerabilities affect various components including Jackson libraries, Netty, Bouncy Castle, Undertow, Apache CXF, Artemis server, WildFly Elytron, and others. The update replaces version 8.1.7 and is intended to mitigate these issues by applying patches and enhancements.

Red Hat JBoss Enterprise Application Platform 8.1.8 includes multiple security fixes addressing a range of vulnerabilities such as denial of service, privilege escalation, authentication bypass, information disclosure, and remote code execution. These vulnerabilities affect various components including Jackson libraries, Netty, Bouncy Castle, Undertow, Artemis server, Apache CXF, WildFly Elytron, and others. The update replaces version 8.1.7 and is intended to mitigate these issues in Red Hat JBoss EAP 8.1 for RHEL 8.

Red Hat JBoss Enterprise Application Platform 8.1.8 includes multiple security fixes addressing vulnerabilities such as denial of service, privilege escalation, arbitrary code execution, authentication bypass, information disclosure, and resource exhaustion. These issues affect various components including Jackson libraries, Netty codecs, Bouncy Castle, Undertow, Artemis server, Apache CXF, WildFly Elytron, and others. The update replaces version 8.1.7 and is rated as having an important security impact by Red Hat. Users are advised to apply this update to mitigate these vulnerabilities.

A rich and intuitive set of strongly-typed assertions to use for unit testing (either with JUnit or TestNG). Security Fix(es): * assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE) (CVE-2026-24400) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code execution capabilities, if untrusted users are allowed to configure JMS for Apache CXF. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.