CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[UPDATE] [high] Red Hat JBoss Enterprise Application Platform: Multiple Vulnerabilities Allow Execution of Arbitrary Code with Service Privileges

high
A remote, authenticated attacker can exploit multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform to execute arbitrary code with the privileges of the service.

CSIRTS triage

vendor: Red Hatproduct: JBoss Enterprise Application PlatformRemote code executionCode injection
What
Multiple vulnerabilities allow remote authenticated attackers to execute arbitrary code with service privileges.
Who is affected
Authenticated users with access to Red Hat JBoss Enterprise Application Platform deployments.
Urgency
High severity; exploit capability and service-level code execution impact require immediate attention despite no confirmed active exploitation.
Action
Apply Red Hat security patches for JBoss Enterprise Application Platform immediately upon availability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch JBoss Enterprise Application Platform

Get an email when a new JBoss Enterprise Application Platform advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
high
Published
2026-08-12
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2752

More from CERT-Bund (BSI) Security Advisories