Red Hat Data Grid 8

Vulnerabilities related to Red Hat Data Grid 8 43

• Medium 4.3 A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested... CVE-2026-119542 Oct 30, 22:54
• Medium 6.5 A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is... CVE-2026-92171 Oct 26, 23:35
• Medium 6.5 A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this... Vulnerability reported (CVE-2026-93574). Risk of unauthorized operations or information disclosure. CVE-2026-93574 Sep 19, 06:18
• Medium 6.5 Vulnerability in Netty's HTTP/1 decoder CVE-2026-93562 Sep 19, 06:18
• Medium 6.5 Vulnerability in Netty's HTTP/2 stack CVE-2026-93579 Sep 19, 02:17
• Medium 6.5 Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling Vulnerability reported (CVE-2026-93573). Risk of unauthorized operations or information disclosure. CVE-2026-93573 Sep 19, 00:17
• High 8.2 HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request... Vulnerability reported (CVE-2026-93569). Data can be tampered with by attackers. CVE-2026-93569 Sep 19, 00:17
• High 7.5 HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests Vulnerability reported (CVE-2026-93568). Data can be tampered with by attackers. CVE-2026-93568 Sep 19, 00:17
• High 7.5 HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled ... Vulnerability reported (CVE-2026-93567). Data can be tampered with by attackers. CVE-2026-93567 Sep 19, 00:17
• Medium 6.5 ### Summary Netty skips strict chunk size line validation when the line has no chunk extension (`... Vulnerability reported (CVE-2026-93566). Risk of unauthorized operations or information disclosure. Exploitable via GET /smuggled. CVE-2026-93566 Sep 19, 00:17
• High 7.5 ### Summary `RtspMethods.valueOf()` silently strips trailing control bytes (any character with... Vulnerability reported (CVE-2026-93565). Data can be tampered with by attackers. Exploitable via RtspDecoder. CVE-2026-93565 Sep 19, 00:17
• High 7.5 Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service Vulnerability reported (CVE-2026-93558). Risk of unauthorized operations or information disclosure. CVE-2026-93558 Sep 19, 00:17
• Medium 5.3 Vulnerability in Netty's HTTP/2 HpackEncoder CVE-2026-93492 Sep 18, 22:18
• High 7.5 Vulnerability in Netty's HttpServerCodec CVE-2026-93491 Sep 18, 22:18
• High 7.5 Vulnerability in Netty CVE-2026-93488 Sep 18, 21:17
• High 7.4 Vulnerability in WildFly Elytron CVE-2026-19611 Aug 21, 01:17
• Low 3.7 Vulnerability in Build Of Keycloak CVE-2026-18569 Aug 4, 15:16
• Low 3.4 Vulnerability in Keycloak CVE-2026-18217 Jul 31, 17:16
• Medium 6.5 Vulnerability in Build Of Keycloak CVE-2026-18208 Jul 31, 17:16
• Low 3.7 Vulnerability in Keycloak CVE-2026-18206 Jul 31, 17:16
• Medium 6.5 Authorization Flaw in Keycloak Vulnerability in Keycloak (CVE-2026-18203). Data can be tampered with by attackers. CVE-2026-18203 Jul 31, 17:16
• Medium 6.5 Vulnerability in Keycloak CVE-2026-18207 Jul 29, 19:16
• Medium 4.3 Vulnerability in Keycloak CVE-2026-16103 Jul 18, 03:31
• Medium 5.5 Vulnerability in Build Of Keycloak CVE-2026-15943 Jul 17, 21:17
• High 8.7 Vulnerability in io.undertow:undertow-parent CVE-2026-28369 Mar 28, 02:16
• High 8.7 Vulnerability in io.undertow:undertow-parent CVE-2026-28368 Mar 28, 02:16
• High 8.7 Vulnerability in io.undertow:undertow-parent CVE-2026-28367 Mar 28, 02:16
• High 7.5 Vulnerability in Undertow CVE-2024-4027 Jan 31, 00:16
• High 8.3 SQL Injection in org.hibernate:hibernate-core CVE-2026-0603 Jan 23, 16:15
• High 8.1 Vulnerability in Wildfly Elytron integration CVE-2025-23368 Mar 5, 2025