{
  "fix": "RHSA-2026:70230",
  "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
  "summary": "RHSA-2026:70230, released September 23, 2026, fixes 35 CVEs across 41 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 41 packages",
  "released": "2026-09-23T19:20:59Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-57967, high severity",
  "supported": true,
  "cveCount": 35,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01468,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://access.redhat.com/errata/RHSA-2026:70230",
  "appliesTo": [
    {
      "product": "eap8-activemq-artemis",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-activemq-artemis",
      "release": "RHEL 10",
      "fixedVersion": "2.40.0-8.redhat_00024.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-apache-cxf",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-apache-cxf",
      "release": "RHEL 10",
      "fixedVersion": "4.1.7-1.SP1_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-artemis-wildfly-integration",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-artemis-wildfly-integration",
      "release": "RHEL 10",
      "fixedVersion": "2.0.5-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-bouncycastle",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-bouncycastle",
      "release": "RHEL 10",
      "fixedVersion": "1.85.0-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-cryptacular",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-cryptacular",
      "release": "RHEL 10",
      "fixedVersion": "1.2.7-1.redhat_00002.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-eap-product-conf-parent",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-eap-product-conf-parent",
      "release": "RHEL 10",
      "fixedVersion": "801.8.0-1.GA_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-hibernate",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-hibernate",
      "release": "RHEL 10",
      "fixedVersion": "6.6.54-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-httpcomponents-asyncclient",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-httpcomponents-asyncclient",
      "release": "RHEL 10",
      "fixedVersion": "4.1.5-5.redhat_00008.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-ironjacamar",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-ironjacamar",
      "release": "RHEL 10",
      "fixedVersion": "3.0.22-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jackson-annotations",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jackson-annotations",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jackson-core",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jackson-core",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jackson-databind",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jackson-databind",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jackson-dataformats-text",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jackson-dataformats-text",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jackson-jaxrs-providers",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jackson-jaxrs-providers",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jackson-modules-base",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jackson-modules-base",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jackson-modules-java8",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jackson-modules-java8",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jakarta-xml-bind-api",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jakarta-xml-bind-api",
      "release": "RHEL 10",
      "fixedVersion": "4.0.5-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jaxb",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jaxb",
      "release": "RHEL 10",
      "fixedVersion": "4.0.7-4.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jaxbintros",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jaxbintros",
      "release": "RHEL 10",
      "fixedVersion": "2.1.0-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jboss-logging",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jboss-logging",
      "release": "RHEL 10",
      "fixedVersion": "3.6.3-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jboss-remoting",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jboss-remoting",
      "release": "RHEL 10",
      "fixedVersion": "5.0.31-1.SP2_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jbossws-api",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jbossws-api",
      "release": "RHEL 10",
      "fixedVersion": "3.1.0-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jbossws-common-tools",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jbossws-common-tools",
      "release": "RHEL 10",
      "fixedVersion": "2.2.0-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jbossws-cxf",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jbossws-cxf",
      "release": "RHEL 10",
      "fixedVersion": "7.4.0-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jbossws-jaxws-undertow-httpspi",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jbossws-jaxws-undertow-httpspi",
      "release": "RHEL 10",
      "fixedVersion": "3.0.1-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jbossws-spi",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jbossws-spi",
      "release": "RHEL 10",
      "fixedVersion": "5.1.0-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-jsf-impl",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-jsf-impl",
      "release": "RHEL 10",
      "fixedVersion": "4.0.11-2.SP1_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-log4j",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-log4j",
      "release": "RHEL 10",
      "fixedVersion": "2.25.4-1.redhat_00003.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-neethi",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-neethi",
      "release": "RHEL 10",
      "fixedVersion": "3.2.2-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-netty",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-netty",
      "release": "RHEL 10",
      "fixedVersion": "4.1.136-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-netty-transport-native-epoll",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-netty-transport-native-epoll",
      "release": "RHEL 10",
      "fixedVersion": "4.1.136-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-nimbus-jose-jwt",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-nimbus-jose-jwt",
      "release": "RHEL 10",
      "fixedVersion": "9.37.4-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-parsson",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-parsson",
      "release": "RHEL 10",
      "fixedVersion": "1.1.9-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-saaj-impl",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-saaj-impl",
      "release": "RHEL 10",
      "fixedVersion": "3.0.6-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-slf4j",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-slf4j",
      "release": "RHEL 10",
      "fixedVersion": "2.0.18-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-undertow",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-undertow",
      "release": "RHEL 10",
      "fixedVersion": "2.3.26-2.SP3_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-wildfly",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-wildfly",
      "release": "RHEL 10",
      "fixedVersion": "8.1.8-9.GA_redhat_00006.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-wildfly-elytron",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-wildfly-elytron",
      "release": "RHEL 10",
      "fixedVersion": "2.6.11-1.Final_redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-wildfly-javadocs",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-wildfly-javadocs",
      "release": "RHEL 10",
      "fixedVersion": "8.1.1-12.GA_redhat_00048.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-ws-commons-XmlSchema",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-ws-commons-xmlschema",
      "release": "RHEL 10",
      "fixedVersion": "2.3.2-1.redhat_00001.1.el10eap",
      "supported": true
    },
    {
      "product": "eap8-xml-security",
      "productUrl": "https://patchblox.com/security/product/linux/eap8-xml-security",
      "release": "RHEL 10",
      "fixedVersion": "3.0.6-1.redhat_00001.1.el10eap",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-57967",
      "url": "https://patchblox.com/security/cve/CVE-2026-57967",
      "title": "eap8-activemq-artemis: An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.4,
      "epss": 0.01468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-54513",
      "url": "https://patchblox.com/security/cve/CVE-2026-54513",
      "title": "apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.\n\nSecur...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.01226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-5680",
      "url": "https://patchblox.com/security/cve/CVE-2026-5680",
      "title": "eap8-activemq-artemis: A flaw was found in Undertow",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.01096,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-54512",
      "url": "https://patchblox.com/security/cve/CVE-2026-54512",
      "title": "dogtag-pki: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.01066,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15565",
      "url": "https://patchblox.com/security/cve/CVE-2026-15565",
      "title": "eap8-activemq-artemis: A flaw was found in Undertow",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.01017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15562",
      "url": "https://patchblox.com/security/cve/CVE-2026-15562",
      "title": "eap8-activemq-artemis: A flaw was found in EAP\u0027s jboss-remoting",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00888,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15567",
      "url": "https://patchblox.com/security/cve/CVE-2026-15567",
      "title": "eap8-activemq-artemis: A flaw was found in Wildfly",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00888,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15555",
      "url": "https://patchblox.com/security/cve/CVE-2026-15555",
      "title": "eap8-activemq-artemis: A flaw was found in JBoss marshalling",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0084,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-49362",
      "url": "https://patchblox.com/security/cve/CVE-2026-49362",
      "title": "eap8-activemq-artemis: An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.2,
      "epss": 0.00821,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-3505",
      "url": "https://patchblox.com/security/cve/CVE-2026-3505",
      "title": "eap8-activemq-artemis: Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of th...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00787,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15560",
      "url": "https://patchblox.com/security/cve/CVE-2026-15560",
      "title": "eap8-activemq-artemis: when EAP runs with -secmgr, the openjdk-orb\u0027s JDKBridge honours attacker-supplied CDR codebase URLs during object unm...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00751,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15561",
      "url": "https://patchblox.com/security/cve/CVE-2026-15561",
      "title": "eap8-activemq-artemis: A flaw was found in EAP\u0027s undertow http/1.1 chunked-transfer decoder",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-86404",
      "url": "https://patchblox.com/security/cve/CVE-2026-86404",
      "title": "eap8-activemq-artemis: EAP\u0027s Artemis deserialization configuration permits deserialization by default",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-50632",
      "url": "https://patchblox.com/security/cve/CVE-2026-50632",
      "title": "eap8-activemq-artemis: A further incomplete fix for\u00A0a previous advisory CVE-2026-44417\u00A0(Untrusted JMS configuration can lead to RCE) for Apa...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00697,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-55831",
      "url": "https://patchblox.com/security/cve/CVE-2026-55831",
      "title": "eap8-activemq-artemis: Netty is a network application framework for development of protocol servers and clients",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-55833",
      "url": "https://patchblox.com/security/cve/CVE-2026-55833",
      "title": "eap8-activemq-artemis: Netty is a network application framework for development of protocol servers and clients",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-44417",
      "url": "https://patchblox.com/security/cve/CVE-2026-44417",
      "title": "eap8-activemq-artemis: The fix for\u00A0CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that an...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15563",
      "url": "https://patchblox.com/security/cve/CVE-2026-15563",
      "title": "eap8-activemq-artemis: A flaw was found in EAP\u0027s IIOP",
      "priority": "High",
      "severity": "important",
      "cvss": 7.4,
      "epss": 0.00663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56745",
      "url": "https://patchblox.com/security/cve/CVE-2026-56745",
      "title": "eap8-activemq-artemis: Netty is a network application framework for development of protocol servers and clients",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.0063,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-73508",
      "url": "https://patchblox.com/security/cve/CVE-2026-73508",
      "title": "eap8-activemq-artemis: Netty is an asynchronous, event-driven network application framework",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.0063,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59899",
      "url": "https://patchblox.com/security/cve/CVE-2026-59899",
      "title": "eap8-activemq-artemis: Netty is an asynchronous, event-driven network application framework",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-49364",
      "url": "https://patchblox.com/security/cve/CVE-2026-49364",
      "title": "eap8-activemq-artemis: An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials dur...",
      "priority": "High",
      "severity": "important",
      "cvss": 8,
      "epss": 0.00566,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46581",
      "url": "https://patchblox.com/security/cve/CVE-2026-46581",
      "title": "eap8-activemq-artemis: In Eclipse Mojarra versions 2.3 and following, URL handing in \u0060DefaultFaceletFactory\u0060 does not properly sanitize and/...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00556,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-49875",
      "url": "https://patchblox.com/security/cve/CVE-2026-49875",
      "title": "eap8-activemq-artemis: Apache CXF\u0027s EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necess...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59649",
      "url": "https://patchblox.com/security/cve/CVE-2026-59649",
      "title": "eap8-activemq-artemis: In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00493,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-15554",
      "url": "https://patchblox.com/security/cve/CVE-2026-15554",
      "title": "eap8-activemq-artemis: the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authe...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.4,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68494",
      "url": "https://patchblox.com/security/cve/CVE-2026-68494",
      "title": "eap8-activemq-artemis: The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56746",
      "url": "https://patchblox.com/security/cve/CVE-2026-56746",
      "title": "eap8-activemq-artemis: Netty is a network application framework for development of protocol servers and clients",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-62243",
      "url": "https://patchblox.com/security/cve/CVE-2026-62243",
      "title": "eap8-activemq-artemis: Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disa...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-14180",
      "url": "https://patchblox.com/security/cve/CVE-2026-14180",
      "title": "eap8-activemq-artemis: A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to...",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.3,
      "epss": 0.01034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-49363",
      "url": "https://patchblox.com/security/cve/CVE-2026-49363",
      "title": "eap8-activemq-artemis: An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a S...",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.3,
      "epss": 0.00804,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-10832",
      "url": "https://patchblox.com/security/cve/CVE-2026-10832",
      "title": "eap8-activemq-artemis: A flaw was found in the DERDecoder class within wildfly-elytron-asn1",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.9,
      "epss": 0.00715,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-54515",
      "url": "https://patchblox.com/security/cve/CVE-2026-54515",
      "title": "eap8-activemq-artemis: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.3,
      "epss": 0.00443,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59889",
      "url": "https://patchblox.com/security/cve/CVE-2026-59889",
      "title": "eap8-activemq-artemis: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 6.5,
      "epss": 0.00346,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-85511",
      "url": "https://patchblox.com/security/cve/CVE-2026-85511",
      "title": "eap8-activemq-artemis: A flaw was found in EAP\u0027s Elytron",
      "priority": "Routine",
      "severity": "low",
      "cvss": 4.2,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}