RHSA-2026:18055: eap8-activemq-artemis Red Hat

Published

Published 19-05-2026Last modified 20-10-2026

Vulnerability summary

RHSA-2026:18055 is a critical (CVSS 9.1) vulnerability in eap8-activemq-artemis Red Hat.

Priority

Prioritisesevere

Severe, CVSS 9.1 (OSV · Red hat); no exploitation reported by the 5 checked sources; EPSS not yet published

Source freshness unavailable

How is this decided?

CVSS score

9.1/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 14 · Downstream 0

CVE-2025-14813 CVE-2025-23368 CVE-2025-67030 CVE-2026-0636 CVE-2026-26996 CVE-2026-27446+8 more

Timeline

19-05-2026
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update

CVSS metrics

1 score · 1 source · 1 version

v3.19.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat85 products

eap8-activemq-artemis< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-cli< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-commons< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-core-client< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-dto< 0:2.40.0-6.redhat_00012.1.el9eap

eap8-activemq-artemis-hornetq-protocol< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-hqclient-protocol< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-client< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-ra< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-server< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-service-extensions< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jdbc-store< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-journal< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-selector< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-server< 0:2.40.0-6.redhat_00012.1.el9eap
eap8-angus< 0:2.0.5-1.redhat_00001.1.el9eap
eap8-angus-activation< 0:2.0.3-1.redhat_00001.1.el9eap
eap8-angus-mail< 0:2.0.5-1.redhat_00001.1.el9eap
eap8-bouncycastle< 0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-jmail< 0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pg< 0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pkix< 0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-prov< 0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-util< 0:1.84.0-1.redhat_00001.1.el9eap
eap8-eap-product-conf-parent< 0:801.6.0-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack< 0:801.6.0-1.GA_redhat_00001.1.el9eap
eap8-guava< 0:33.0.0-3.jre_redhat_00004.1.el9eap
eap8-guava-failureaccess< 0:1.0.3-1.redhat_00001.1.el9eap
eap8-guava-libraries< 0:33.0.0-3.jre_redhat_00004.1.el9eap
eap8-hal-console< 0:3.7.19-1.Final_redhat_00001.1.el9eap
eap8-hibernate< 0:6.6.48-1.Final_redhat_00001.1.el9eap
eap8-hibernate-core< 0:6.6.48-1.Final_redhat_00001.1.el9eap
eap8-hibernate-envers< 0:6.6.48-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search< 0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-backend-elasticsearch< 0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-backend-lucene< 0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-engine< 0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-mapper-orm< 0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-mapper-pojo-base< 0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-util-common< 0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-jakarta-activation< 0:2.1.4-1.redhat_00001.1.el9eap
eap8-jboss-logging< 0:3.6.2-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata< 0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-appclient< 0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-common< 0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-ear< 0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-ejb< 0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-web< 0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jctools< 0:4.0.6-1.redhat_00001.1.el9eap
eap8-jctools-core< 0:4.0.6-1.redhat_00001.1.el9eap
eap8-netty< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-buffer< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec-dns< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec-http< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec-socks< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-common< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-handler< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-handler-proxy< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-resolver< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-resolver-dns< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-classes-epoll< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-native-epoll< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-native-epoll-debuginfo< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-native-unix-common< 0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-plexus-utils< 0:3.6.1-1.redhat_00001.1.el9eap
eap8-reactivex-rxjava< 0:3.1.12-1.redhat_00001.1.el9eap
eap8-reactivex-rxjava2< 0:2.2.21-5.redhat_00003.1.el9eap
eap8-wildfly< 0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-wildfly-client-config< 0:1.0.1-4.Final_redhat_00002.1.el9eap
eap8-wildfly-http-client< 0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-client-common< 0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-ejb-client< 0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-naming-client< 0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-transaction-client< 0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-java-jdk17< 0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-wildfly-java-jdk21< 0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-wildfly-javadocs< 0:8.1.1-10.GA_redhat_00017.1.el9eap
eap8-wildfly-modules< 0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-wildfly-openssl< 0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-wildfly-openssl-el9-x86_64< 0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-wildfly-openssl-el9-x86_64-debuginfo< 0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-wildfly-openssl-java< 0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-yasson< 0:3.0.4-5.redhat_00007.1.el9eap

Show all 85

1 vendor · 85 products

References

117 links

access.redhat.com/errata/RHSA-2026:18055Advisory
access.redhat.com/security/updates/classification/ARTICLE
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1ARTICLE
docs.redhat.com/en/…ARTICLE
docs.redhat.com/en/…ARTICLE
access.redhat.com/articles/7134190ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2337621REPORT
bugzilla.redhat.com/show_bug.cgi?id=2441268REPORT
bugzilla.redhat.com/show_bug.cgi?id=2442671REPORT
bugzilla.redhat.com/show_bug.cgi?id=2442908REPORT

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2442922REPORT
bugzilla.redhat.com/show_bug.cgi?id=2444320REPORT
bugzilla.redhat.com/show_bug.cgi?id=2451409REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452453REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452456REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458634REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458635REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458638REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458640REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458641REPORT
issues.redhat.com/browse/JBEAP-29032ARTICLE
issues.redhat.com/browse/JBEAP-31314ARTICLE
issues.redhat.com/browse/JBEAP-31468ARTICLE
issues.redhat.com/browse/JBEAP-31868ARTICLE
issues.redhat.com/browse/JBEAP-31874ARTICLE
issues.redhat.com/browse/JBEAP-32025ARTICLE
issues.redhat.com/browse/JBEAP-32028ARTICLE
issues.redhat.com/browse/JBEAP-32064ARTICLE
issues.redhat.com/browse/JBEAP-32075ARTICLE
issues.redhat.com/browse/JBEAP-32078ARTICLE
issues.redhat.com/browse/JBEAP-32084ARTICLE
issues.redhat.com/browse/JBEAP-32123ARTICLE
issues.redhat.com/browse/JBEAP-32209ARTICLE
issues.redhat.com/browse/JBEAP-32212ARTICLE
issues.redhat.com/browse/JBEAP-32266ARTICLE
issues.redhat.com/browse/JBEAP-32293ARTICLE
issues.redhat.com/browse/JBEAP-32295ARTICLE
issues.redhat.com/browse/JBEAP-32339ARTICLE
issues.redhat.com/browse/JBEAP-32350ARTICLE
issues.redhat.com/browse/JBEAP-32415ARTICLE
issues.redhat.com/browse/JBEAP-32481ARTICLE
issues.redhat.com/browse/JBEAP-32486ARTICLE
issues.redhat.com/browse/JBEAP-32544ARTICLE
issues.redhat.com/browse/JBEAP-32601ARTICLE
issues.redhat.com/browse/JBEAP-32687ARTICLE
issues.redhat.com/browse/JBEAP-32755ARTICLE
issues.redhat.com/browse/JBEAP-32773ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18055.jsonAdvisory
access.redhat.com/security/cve/CVE-2025-14813REPORT
www.cve.org/CVERecord?id=CVE-2025-14813Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14813Advisory
github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813ARTICLE
access.redhat.com/security/cve/CVE-2025-23368REPORT
www.cve.org/CVERecord?id=CVE-2025-23368Advisory
nvd.nist.gov/vuln/detail/CVE-2025-23368Advisory
www.gruppotim.it/it/footer/red-team.htmlARTICLE
access.redhat.com/security/cve/CVE-2025-67030REPORT
www.cve.org/CVERecord?id=CVE-2025-67030Advisory
nvd.nist.gov/vuln/detail/CVE-2025-67030Advisory
gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ecARTICLE
github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642ARTICLE
github.com/codehaus-plexus/plexus-utils/issues/294ARTICLE
github.com/codehaus-plexus/plexus-utils/pull/295ARTICLE
github.com/codehaus-plexus/plexus-utils/pull/296ARTICLE
access.redhat.com/security/cve/CVE-2026-0636REPORT
www.cve.org/CVERecord?id=CVE-2026-0636Advisory
nvd.nist.gov/vuln/detail/CVE-2026-0636Advisory
github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbdeARTICLE
github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636ARTICLE
access.redhat.com/security/cve/CVE-2026-3505REPORT
www.cve.org/CVERecord?id=CVE-2026-3505Advisory
nvd.nist.gov/vuln/detail/CVE-2026-3505Advisory
github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505ARTICLE
access.redhat.com/security/cve/CVE-2026-5588REPORT
www.cve.org/CVERecord?id=CVE-2026-5588Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5588Advisory
github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588ARTICLE
access.redhat.com/security/cve/CVE-2026-5598REPORT
www.cve.org/CVERecord?id=CVE-2026-5598Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5598Advisory
github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998ARTICLE
access.redhat.com/security/cve/CVE-2026-26996REPORT
www.cve.org/CVERecord?id=CVE-2026-26996Advisory
nvd.nist.gov/vuln/detail/CVE-2026-26996Advisory
github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5ARTICLE
github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26ARTICLE
access.redhat.com/security/cve/CVE-2026-27446REPORT
www.cve.org/CVERecord?id=CVE-2026-27446Advisory
nvd.nist.gov/vuln/detail/CVE-2026-27446Advisory
lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8ggARTICLE
access.redhat.com/security/cve/CVE-2026-27727REPORT
www.cve.org/CVERecord?id=CVE-2026-27727Advisory
nvd.nist.gov/vuln/detail/CVE-2026-27727Advisory
github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44ARTICLE
mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascalARTICLE
www.mchange.com/projects/c3p0/ARTICLE
www.mchange.com/projects/c3p0/ARTICLE
access.redhat.com/security/cve/CVE-2026-27830REPORT
www.cve.org/CVERecord?id=CVE-2026-27830Advisory
nvd.nist.gov/vuln/detail/CVE-2026-27830Advisory

Showing 100 of 117.