RHSA-2026:12267
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 01 May 2026, 10:22
Last modified:30 Jun 2026, 10:35
Vulnerability Summary
Overall Risk (default)
medium
30/100 CVSS Score
7.5 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
01 May 2026, 10:22
Published
Vulnerability first disclosed
30 Jun 2026, 10:35
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update
CVSS Metrics
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Systems
- redhat•eap7-bouncycastle
< 0:1.84.0-1.redhat_00001.1.el7eap | < 0:1.84.0-1.redhat_00001.1.el8eap | < 0:1.84.0-1.redhat_00001.1.el9eap
- redhat•eap7-bouncycastle-mail
< 0:1.84.0-1.redhat_00001.1.el7eap | < 0:1.84.0-1.redhat_00001.1.el8eap | < 0:1.84.0-1.redhat_00001.1.el9eap
- redhat•eap7-bouncycastle-pg
< 0:1.84.0-1.redhat_00001.1.el7eap | < 0:1.84.0-1.redhat_00001.1.el8eap | < 0:1.84.0-1.redhat_00001.1.el9eap
- redhat•eap7-bouncycastle-pkix
< 0:1.84.0-1.redhat_00001.1.el7eap | < 0:1.84.0-1.redhat_00001.1.el8eap | < 0:1.84.0-1.redhat_00001.1.el9eap
- redhat•eap7-bouncycastle-prov
< 0:1.84.0-1.redhat_00001.1.el7eap | < 0:1.84.0-1.redhat_00001.1.el8eap | < 0:1.84.0-1.redhat_00001.1.el9eap
- redhat•eap7-bouncycastle-util
< 0:1.84.0-1.redhat_00001.1.el7eap | < 0:1.84.0-1.redhat_00001.1.el8eap | < 0:1.84.0-1.redhat_00001.1.el9eap
References (12)
- https://access.redhat.com/errata/RHSA-2026:12267
- https://access.redhat.com/security/updates/classification/#important
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
- https://access.redhat.com/articles/7137599
- https://bugzilla.redhat.com/show_bug.cgi?id=2458635
- https://issues.redhat.com/browse/JBEAP-32774
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12267.json
- https://access.redhat.com/security/cve/CVE-2026-5598
- https://www.cve.org/CVERecord?id=CVE-2026-5598
- https://nvd.nist.gov/vuln/detail/CVE-2026-5598
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998