Tag
#Red Hat JBoss Enterprise Application Platform
CVE-2026-15562: Denial of Service Vulnerability in Red Hat JBoss Enterprise Application Platform
A remote unauthenticated attacker can exploit a vulnerability in Red Hat JBoss Enterprise Application Platform's jboss-remoting component to cause Out-of-Memory (OOM) errors, leading to a denial of service. The vulnerability has a CVSS score of 7.5 and affects multiple versions of the platform. Affected administrators should update to the latest version to mitigate the vulnerability.
CVE-2026-15561: Unauthenticated Denial of Service in Red Hat JBoss Enterprise Application Platform
A vulnerability in the undertow HTTP/1.1 chunked-transfer decoder of Red Hat JBoss Enterprise Application Platform (EAP) 7.4 ELS on RHEL 7 allows an unauthenticated attacker to cause a Denial of Service (DoS) by driving the JVM to an OutOfMemory error. The vulnerability has a CVSS score of 7.5 and is not currently being actively exploited. Affected products include various packages such as eap7-activemq-artemis, eap7-glassfish-jsf, and eap7-jackson-annotations, among others. Immediate patching is recommended to prevent potential DoS attacks.