RHSA-2026:53646
Advisory lineage Upstream: 41 Downstream: 0
Published: 18 Sept 2026, 10:11
Last modified:19 Sept 2026, 10:11
Vulnerability Summary
Overall Risk (default)
high
70/100 CVSS Score
9.8 CRITICAL
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
18 Sept 2026, 10:11
Published
Vulnerability first disclosed
19 Sept 2026, 10:11
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update
CVSS Metrics
- v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- redhat•eap7-activemq-artemis
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-cli
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-commons
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-core-client
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-dto
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-hornetq-protocol
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-hqclient-protocol
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-jdbc-store
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-jms-client
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-jms-server
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-journal
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-ra
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-selector
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-server
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-service-extensions
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-activemq-artemis-tools
< 0:2.16.0-22.redhat_00057.1.el9eap
- redhat•eap7-glassfish-jsf
< 0:2.3.14-11.SP11_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-common-api
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-common-impl
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-common-spi
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-core-api
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-core-impl
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-deployers-common
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-jdbc
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-validator
< 0:1.5.26-2.Final_redhat_00001.1.el9eap
- redhat•eap7-jackson-annotations
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-core
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-databind
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-datatype-jdk8
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-datatype-jsr310
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-jaxrs-base
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-jaxrs-json-provider
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-jaxrs-providers
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-module-jaxb-annotations
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-modules-base
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jackson-modules-java8
< 0:2.18.8-1.redhat_00003.1.el9eap
- redhat•eap7-jboss-remoting
< 0:5.0.31-3.SP2_redhat_00001.1.el9eap
- redhat•eap7-jboss-server-migration
< 0:1.10.0-46.Final_redhat_00044.1.el9eap
- redhat•eap7-jboss-server-migration-cli
< 0:1.10.0-46.Final_redhat_00044.1.el9eap
- redhat•eap7-jboss-server-migration-core
< 0:1.10.0-46.Final_redhat_00044.1.el9eap
- redhat•eap7-netty
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-buffer
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-codec
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-codec-dns
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-codec-haproxy
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-codec-http
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-codec-http2
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-codec-memcache
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
- redhat•eap7-netty-codec-mqtt
< 0:4.1.135-1.Final_redhat_00001.1.el9eap
Showing first 50 affected entries in server-rendered view.
References (218)
- https://access.redhat.com/errata/RHSA-2026:53646
- https://access.redhat.com/security/updates/classification/#important
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/getting_started_with_jboss_eap_for_openshift_container_platform/index
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/installation_guide/index
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/7.4.0_release_notes/index
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
- https://bugzilla.redhat.com/show_bug.cgi?id=2444320
- https://bugzilla.redhat.com/show_bug.cgi?id=2458634
- https://bugzilla.redhat.com/show_bug.cgi?id=2458635
- https://bugzilla.redhat.com/show_bug.cgi?id=2458638
- https://bugzilla.redhat.com/show_bug.cgi?id=2458640
- https://bugzilla.redhat.com/show_bug.cgi?id=2458641
- https://bugzilla.redhat.com/show_bug.cgi?id=2467540
- https://bugzilla.redhat.com/show_bug.cgi?id=2477217
- https://bugzilla.redhat.com/show_bug.cgi?id=2477220
- https://bugzilla.redhat.com/show_bug.cgi?id=2477224
- https://bugzilla.redhat.com/show_bug.cgi?id=2477226
- https://bugzilla.redhat.com/show_bug.cgi?id=2477227
- https://bugzilla.redhat.com/show_bug.cgi?id=2477232
- https://bugzilla.redhat.com/show_bug.cgi?id=2477930
- https://bugzilla.redhat.com/show_bug.cgi?id=2480325
- https://bugzilla.redhat.com/show_bug.cgi?id=2480601
- https://bugzilla.redhat.com/show_bug.cgi?id=2480637
- https://bugzilla.redhat.com/show_bug.cgi?id=2482963
- https://bugzilla.redhat.com/show_bug.cgi?id=2482965
- https://bugzilla.redhat.com/show_bug.cgi?id=2483121
- https://bugzilla.redhat.com/show_bug.cgi?id=2483131
- https://bugzilla.redhat.com/show_bug.cgi?id=2483133
- https://bugzilla.redhat.com/show_bug.cgi?id=2483135
- https://bugzilla.redhat.com/show_bug.cgi?id=2483136
- https://bugzilla.redhat.com/show_bug.cgi?id=2483138
- https://bugzilla.redhat.com/show_bug.cgi?id=2488053
- https://bugzilla.redhat.com/show_bug.cgi?id=2488062
- https://bugzilla.redhat.com/show_bug.cgi?id=2488081
- https://bugzilla.redhat.com/show_bug.cgi?id=2488383
- https://bugzilla.redhat.com/show_bug.cgi?id=2488388
- https://bugzilla.redhat.com/show_bug.cgi?id=2488391
- https://bugzilla.redhat.com/show_bug.cgi?id=2488400
- https://bugzilla.redhat.com/show_bug.cgi?id=2488413
- https://bugzilla.redhat.com/show_bug.cgi?id=2488429
- https://bugzilla.redhat.com/show_bug.cgi?id=2488433
- https://bugzilla.redhat.com/show_bug.cgi?id=2488437
- https://bugzilla.redhat.com/show_bug.cgi?id=2488439
- https://bugzilla.redhat.com/show_bug.cgi?id=2488442
- https://bugzilla.redhat.com/show_bug.cgi?id=2490628
- https://bugzilla.redhat.com/show_bug.cgi?id=2491620
- https://bugzilla.redhat.com/show_bug.cgi?id=2491999
- https://bugzilla.redhat.com/show_bug.cgi?id=2492015
- https://bugzilla.redhat.com/show_bug.cgi?id=2511026
- https://issues.redhat.com/browse/JBEAP-30841
- https://issues.redhat.com/browse/JBEAP-33515
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53646.json
- https://access.redhat.com/security/cve/CVE-2025-14813
- https://www.cve.org/CVERecord?id=CVE-2025-14813
- https://nvd.nist.gov/vuln/detail/CVE-2025-14813
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813
- https://access.redhat.com/security/cve/CVE-2026-0636
- https://www.cve.org/CVERecord?id=CVE-2026-0636
- https://nvd.nist.gov/vuln/detail/CVE-2026-0636
- https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636
- https://access.redhat.com/security/cve/CVE-2026-3505
- https://www.cve.org/CVERecord?id=CVE-2026-3505
- https://nvd.nist.gov/vuln/detail/CVE-2026-3505
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505
- https://access.redhat.com/security/cve/CVE-2026-5588
- https://www.cve.org/CVERecord?id=CVE-2026-5588
- https://nvd.nist.gov/vuln/detail/CVE-2026-5588
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588
- https://access.redhat.com/security/cve/CVE-2026-5598
- https://www.cve.org/CVERecord?id=CVE-2026-5598
- https://nvd.nist.gov/vuln/detail/CVE-2026-5598
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998
- https://access.redhat.com/security/cve/CVE-2026-10579
- https://www.cve.org/CVERecord?id=CVE-2026-10579
- https://nvd.nist.gov/vuln/detail/CVE-2026-10579
- https://access.redhat.com/security/cve/CVE-2026-15554
- https://www.cve.org/CVERecord?id=CVE-2026-15554
- https://nvd.nist.gov/vuln/detail/CVE-2026-15554
- https://access.redhat.com/security/cve/CVE-2026-15555
- https://www.cve.org/CVERecord?id=CVE-2026-15555
- https://nvd.nist.gov/vuln/detail/CVE-2026-15555
- https://access.redhat.com/security/cve/CVE-2026-15556
- https://www.cve.org/CVERecord?id=CVE-2026-15556
- https://nvd.nist.gov/vuln/detail/CVE-2026-15556
- https://access.redhat.com/security/cve/CVE-2026-15560
- https://www.cve.org/CVERecord?id=CVE-2026-15560
- https://nvd.nist.gov/vuln/detail/CVE-2026-15560
- https://access.redhat.com/security/cve/CVE-2026-15561
- https://www.cve.org/CVERecord?id=CVE-2026-15561
- https://nvd.nist.gov/vuln/detail/CVE-2026-15561
- https://access.redhat.com/security/cve/CVE-2026-15562
- https://www.cve.org/CVERecord?id=CVE-2026-15562
- https://nvd.nist.gov/vuln/detail/CVE-2026-15562
- https://access.redhat.com/security/cve/CVE-2026-15563
- https://www.cve.org/CVERecord?id=CVE-2026-15563
- https://nvd.nist.gov/vuln/detail/CVE-2026-15563
- https://access.redhat.com/security/cve/CVE-2026-15565
- https://www.cve.org/CVERecord?id=CVE-2026-15565
- https://nvd.nist.gov/vuln/detail/CVE-2026-15565
- https://cwe.mitre.org/data/definitions/120.html
- https://access.redhat.com/security/cve/CVE-2026-15567
- https://www.cve.org/CVERecord?id=CVE-2026-15567
- https://nvd.nist.gov/vuln/detail/CVE-2026-15567
- https://access.redhat.com/security/cve/CVE-2026-27446
- https://www.cve.org/CVERecord?id=CVE-2026-27446
- https://nvd.nist.gov/vuln/detail/CVE-2026-27446
- https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg
- https://access.redhat.com/security/cve/CVE-2026-41417
- https://www.cve.org/CVERecord?id=CVE-2026-41417
- https://nvd.nist.gov/vuln/detail/CVE-2026-41417
- https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv
- https://access.redhat.com/security/cve/CVE-2026-42578
- https://www.cve.org/CVERecord?id=CVE-2026-42578
- https://nvd.nist.gov/vuln/detail/CVE-2026-42578
- https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr
- https://access.redhat.com/security/cve/CVE-2026-42579
- https://www.cve.org/CVERecord?id=CVE-2026-42579
- https://nvd.nist.gov/vuln/detail/CVE-2026-42579
- https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm
- https://access.redhat.com/security/cve/CVE-2026-42581
- https://www.cve.org/CVERecord?id=CVE-2026-42581
- https://nvd.nist.gov/vuln/detail/CVE-2026-42581
- https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9
- https://access.redhat.com/security/cve/CVE-2026-42584
- https://www.cve.org/CVERecord?id=CVE-2026-42584
- https://nvd.nist.gov/vuln/detail/CVE-2026-42584
- https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3
- https://access.redhat.com/security/cve/CVE-2026-42585
- https://www.cve.org/CVERecord?id=CVE-2026-42585
- https://nvd.nist.gov/vuln/detail/CVE-2026-42585
- https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv
- https://access.redhat.com/security/cve/CVE-2026-42587
- https://www.cve.org/CVERecord?id=CVE-2026-42587
- https://nvd.nist.gov/vuln/detail/CVE-2026-42587
- https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv
- https://access.redhat.com/security/cve/CVE-2026-44249
- https://www.cve.org/CVERecord?id=CVE-2026-44249
- https://nvd.nist.gov/vuln/detail/CVE-2026-44249
- https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
- https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
- https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86
- https://access.redhat.com/security/cve/CVE-2026-44250
- https://www.cve.org/CVERecord?id=CVE-2026-44250
- https://nvd.nist.gov/vuln/detail/CVE-2026-44250
- https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2
- https://access.redhat.com/security/cve/CVE-2026-44890
- https://www.cve.org/CVERecord?id=CVE-2026-44890
- https://nvd.nist.gov/vuln/detail/CVE-2026-44890
- https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3
- https://access.redhat.com/security/cve/CVE-2026-44893
- https://www.cve.org/CVERecord?id=CVE-2026-44893
- https://nvd.nist.gov/vuln/detail/CVE-2026-44893
- https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv
- https://access.redhat.com/security/cve/CVE-2026-45416
- https://www.cve.org/CVERecord?id=CVE-2026-45416
- https://nvd.nist.gov/vuln/detail/CVE-2026-45416
- https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh
- https://access.redhat.com/security/cve/CVE-2026-45674
- https://www.cve.org/CVERecord?id=CVE-2026-45674
- https://nvd.nist.gov/vuln/detail/CVE-2026-45674
- https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc
- https://access.redhat.com/security/cve/CVE-2026-46340
- https://www.cve.org/CVERecord?id=CVE-2026-46340
- https://nvd.nist.gov/vuln/detail/CVE-2026-46340
- https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch
- https://access.redhat.com/security/cve/CVE-2026-46581
- https://www.cve.org/CVERecord?id=CVE-2026-46581
- https://nvd.nist.gov/vuln/detail/CVE-2026-46581
- https://access.redhat.com/security/cve/CVE-2026-47691
- https://www.cve.org/CVERecord?id=CVE-2026-47691
- https://nvd.nist.gov/vuln/detail/CVE-2026-47691
- https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85
- https://access.redhat.com/security/cve/CVE-2026-48006
- https://www.cve.org/CVERecord?id=CVE-2026-48006
- https://nvd.nist.gov/vuln/detail/CVE-2026-48006
- https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm
- https://access.redhat.com/security/cve/CVE-2026-48043
- https://www.cve.org/CVERecord?id=CVE-2026-48043
- https://nvd.nist.gov/vuln/detail/CVE-2026-48043
- https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j
- https://access.redhat.com/security/cve/CVE-2026-48059
- https://www.cve.org/CVERecord?id=CVE-2026-48059
- https://nvd.nist.gov/vuln/detail/CVE-2026-48059
- https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j
- https://access.redhat.com/security/cve/CVE-2026-50010
- https://www.cve.org/CVERecord?id=CVE-2026-50010
- https://nvd.nist.gov/vuln/detail/CVE-2026-50010
- https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9
- https://access.redhat.com/security/cve/CVE-2026-50011
- https://www.cve.org/CVERecord?id=CVE-2026-50011
- https://nvd.nist.gov/vuln/detail/CVE-2026-50011
- https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7
- https://access.redhat.com/security/cve/CVE-2026-50193
- https://www.cve.org/CVERecord?id=CVE-2026-50193
- https://nvd.nist.gov/vuln/detail/CVE-2026-50193
- https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c
- https://github.com/FasterXML/jackson-databind/issues/3447
- https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh
- https://access.redhat.com/security/cve/CVE-2026-54512
- https://www.cve.org/CVERecord?id=CVE-2026-54512
- https://nvd.nist.gov/vuln/detail/CVE-2026-54512
- https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5
- https://github.com/FasterXML/jackson-databind/issues/5988
- https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm
- https://access.redhat.com/security/cve/CVE-2026-68494
- https://www.cve.org/CVERecord?id=CVE-2026-68494
- https://nvd.nist.gov/vuln/detail/CVE-2026-68494
- https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd
- https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641
- https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8
- https://github.com/FasterXML/jackson-core/pull/1611
- https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9
- https://github.com/advisories/GHSA-72hv-8253-57qq
- https://www.cve.org/CVERecord?id=CVE-2026-18401
- https://access.redhat.com/security/cve/CVE-2026-86404
- https://www.cve.org/CVERecord?id=CVE-2026-86404
- https://nvd.nist.gov/vuln/detail/CVE-2026-86404