Zetlyn
GitHubGet started

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation

zetlyn/cve-redhat vulnerability cve CVE-2026-49362 known 2026-09-10

https://access.redhat.com/security/cve/CVE-2026-49362

Properties

cvss8.2
receipt
Source
Red Hat
Its words
8.2
Read by
field:cvss3_score
Said since
2026-09-29 09:44 UTC
Last answered
2026-10-05 12:24 UTC
Original
open at the source
What the source handed over
{
  "CVE": "CVE-2026-49362",
  "CWE": null,
  "advisories": [
    "RHSA-2026:66488",
    "RHSA-2026:70229",
    "RHSA-2026:66545",
    "RHSA-2026:70230",
    "RHSA-2026:70228",
    "RHSA-2026:67604"
  ],
  "affected_packages": [
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el8eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el10eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el9eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el10eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el8eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el8eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el10eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el8eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el10eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el8eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el9eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el10eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el10eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el8eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el9eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el10eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el9eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el9eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el8eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el8eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el9eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el10eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el8eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el10eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el9eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el10eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el10eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el9eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el8eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el8eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el9eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el9eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el9eap",
    "artemis-server",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el9eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el9eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el9eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el10eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el9eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el8eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el10eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el10eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el9eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el9eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el9eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el10eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el8eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el10eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el8eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el10eap",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el10eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el8eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el7eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el10eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el8eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el10eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el10eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el8eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el10eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el9eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el8eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el8eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el8eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el7eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el10eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el9eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el10eap",
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el10eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el10eap",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el8eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el8eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el10eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el9eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el10eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el10eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el10eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el8eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el8eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el8eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el8eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el8eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1el9eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el9eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el8eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el9eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el8eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el9eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el10eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el8eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el8eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el8eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el10eap"
  ],
  "bugzilla": "2477945",
  "bugzilla_description": "artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation",
  "cvss3_score": "8.2",
  "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-09-10T05:35:46Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-49362.json",
  "severity": "important"
}
packageseap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el8eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap, eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el10eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el9eap, eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el7eap, eap8-neethi-0:3.2.2-1.redhat_00001.1.el10eap, eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el8eap, eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el8eap, eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el10eap, eap8-log4j-0:2.25.4-1.redhat_00003.1.el9eap, eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap, eap8-xml-security-0:3.0.6-1.redhat_00001.1.el8eap, eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el10eap, eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el8eap, eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el9eap, eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el10eap, eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el10eap, eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el8eap, eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el9eap, eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el10eap, eap8-slf4j-0:2.0.18-1.redhat_00001.1.el9eap, eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el9eap, eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el8eap, eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el8eap, eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el7eap, eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el7eap, eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el8eap, eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el9eap, eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el10eap, eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el8eap, eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap, eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap, eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el10eap, eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el9eap, eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el10eap, eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el10eap, eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el9eap, eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el8eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el8eap, eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el9eap, eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el9eap, eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el9eap, artemis-server, eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el9eap, eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el9eap, eap8-neethi-0:3.2.2-1.redhat_00001.1.el9eap, eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el10eap, eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el9eap, eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el9eap, eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el8eap, eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el10eap, eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el10eap, eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el9eap, eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el8eap, eap8-xml-security-0:3.0.6-1.redhat_00001.1.el9eap, eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el10eap, eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el10eap, eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el9eap, eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap, eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el9eap, eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap, eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jaxb-0:4.0.7-4.redhat_00001.1.el10eap, eap8-jaxb-0:4.0.7-4.redhat_00001.1.el8eap, eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el8eap, eap8-xml-security-0:3.0.6-1.redhat_00001.1.el10eap, eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el8eap, eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el10eap, eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el10eap, eap8-neethi-0:3.2.2-1.redhat_00001.1.el8eap, eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el9eap, eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el7eap, eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el8eap, eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el7eap, eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el10eap, eap8-slf4j-0:2.0.18-1.redhat_00001.1.el8eap, eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el10eap, eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el10eap, eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el8eap, eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el10eap, eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap, eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el9eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el8eap, eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el8eap, eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el8eap, eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el7eap, eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el10eap, eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el9eap, eap8-log4j-0:2.25.4-1.redhat_00003.1.el10eap, eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap, eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el10eap, eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el9eap, eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el10eap, eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el8eap, eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el8eap, eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el9eap, eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el10eap, eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el9eap, eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap, eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el10eap, eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el10eap, eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el7eap, eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el10eap, eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el8eap, eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el8eap, eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el9eap, eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el10eap, eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el8eap, eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el8eap, eap8-log4j-0:2.25.4-1.redhat_00003.1.el8eap, eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap, eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el9eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el9eap, eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1el9eap, eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el9eap, eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap, eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el8eap, eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el9eap, eap8-slf4j-0:2.0.18-1.redhat_00001.1.el10eap, eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el8eap, eap8-jaxb-0:4.0.7-4.redhat_00001.1.el9eap, eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el10eap, eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el8eap, eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el7eap, eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el8eap, eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el8eap, eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el10eap
receipt
Source
Red Hat
Its words
eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el8eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap, eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el10eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el9eap, eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el7eap, eap8-neethi-0:3.2.2-1.redhat_00001.1.el10eap, eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el8eap, eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el8eap, eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el10eap, eap8-log4j-0:2.25.4-1.redhat_00003.1.el9eap, eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap, eap8-xml-security-0:3.0.6-1.redhat_00001.1.el8eap, eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el10eap, eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el8eap, eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el9eap, eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el10eap, eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el10eap, eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el8eap, eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el9eap, eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el10eap, eap8-slf4j-0:2.0.18-1.redhat_00001.1.el9eap, eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el9eap, eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el8eap, eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el8eap, eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el7eap, eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el7eap, eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el8eap, eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el9eap, eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el10eap, eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el8eap, eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap, eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap, eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el10eap, eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el9eap, eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el10eap, eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el10eap, eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el9eap, eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el8eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el8eap, eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el9eap, eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el9eap, eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el9eap, artemis-server, eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el9eap, eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el9eap, eap8-neethi-0:3.2.2-1.redhat_00001.1.el9eap, eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el10eap, eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el9eap, eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el9eap, eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el8eap, eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el10eap, eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el10eap, eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el9eap, eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el8eap, eap8-xml-security-0:3.0.6-1.redhat_00001.1.el9eap, eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el10eap, eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el10eap, eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el9eap, eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap, eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el9eap, eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap, eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jaxb-0:4.0.7-4.redhat_00001.1.el10eap, eap8-jaxb-0:4.0.7-4.redhat_00001.1.el8eap, eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el8eap, eap8-xml-security-0:3.0.6-1.redhat_00001.1.el10eap, eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el8eap, eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el10eap, eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el10eap, eap8-neethi-0:3.2.2-1.redhat_00001.1.el8eap, eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el9eap, eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el7eap, eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el8eap, eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el7eap, eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el10eap, eap8-slf4j-0:2.0.18-1.redhat_00001.1.el8eap, eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el10eap, eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el10eap, eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el8eap, eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el10eap, eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap, eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el9eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el8eap, eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el8eap, eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el8eap, eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el7eap, eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el10eap, eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el9eap, eap8-log4j-0:2.25.4-1.redhat_00003.1.el10eap, eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap, eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el10eap, eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el9eap, eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap, eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el10eap, eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el8eap, eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el8eap, eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el9eap, eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el10eap, eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el9eap, eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap, eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el10eap, eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el10eap, eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el7eap, eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el10eap, eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el8eap, eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el8eap, eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el9eap, eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el10eap, eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap, eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el8eap, eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el8eap, eap8-log4j-0:2.25.4-1.redhat_00003.1.el8eap, eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap, eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el9eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el9eap, eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1el9eap, eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el9eap, eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap, eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el8eap, eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el9eap, eap8-slf4j-0:2.0.18-1.redhat_00001.1.el10eap, eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el8eap, eap8-jaxb-0:4.0.7-4.redhat_00001.1.el9eap, eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el10eap, eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el8eap, eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el7eap, eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el8eap, eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el8eap, eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el10eap
Read by
field:affected_packages[]
Said since
2026-09-29 09:44 UTC
Last answered
2026-10-05 12:24 UTC
Original
open at the source
What the source handed over
{
  "CVE": "CVE-2026-49362",
  "CWE": null,
  "advisories": [
    "RHSA-2026:66488",
    "RHSA-2026:70229",
    "RHSA-2026:66545",
    "RHSA-2026:70230",
    "RHSA-2026:70228",
    "RHSA-2026:67604"
  ],
  "affected_packages": [
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el8eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el10eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el9eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el10eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el8eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el8eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el10eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el8eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el10eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el8eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el9eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el10eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el10eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el8eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el9eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el10eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el9eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el9eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el8eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el8eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el9eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el10eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el8eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el10eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el9eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el10eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el10eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el9eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el8eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el8eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el9eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el9eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el9eap",
    "artemis-server",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el9eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el9eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el9eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el10eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el9eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el8eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el10eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el10eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el9eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el9eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el9eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el10eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el8eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el10eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el8eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el10eap",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el10eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el8eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el7eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el10eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el8eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el10eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el10eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el8eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el10eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el9eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el8eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el8eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el8eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el7eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el10eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el9eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el10eap",
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el10eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el10eap",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el8eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el8eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el10eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el9eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el10eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el10eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el10eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el8eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el8eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el8eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el8eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el8eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1el9eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el9eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el8eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el9eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el8eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el9eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el10eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el8eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el8eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el8eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el10eap"
  ],
  "bugzilla": "2477945",
  "bugzilla_description": "artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation",
  "cvss3_score": "8.2",
  "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-09-10T05:35:46Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-49362.json",
  "severity": "important"
}
severityimportant
A flaw that can easily compromise confidentiality, integrity or availability.
receipt
Source
Red Hat
Its words
important
Read by
field:severity
Said since
2026-09-29 09:44 UTC
Last answered
2026-10-05 12:24 UTC
Original
open at the source
What the source handed over
{
  "CVE": "CVE-2026-49362",
  "CWE": null,
  "advisories": [
    "RHSA-2026:66488",
    "RHSA-2026:70229",
    "RHSA-2026:66545",
    "RHSA-2026:70230",
    "RHSA-2026:70228",
    "RHSA-2026:67604"
  ],
  "affected_packages": [
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el8eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el10eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el9eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el10eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el8eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el8eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el10eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el8eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el10eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el8eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el9eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el10eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el10eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el8eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el9eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el10eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el9eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el9eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el8eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el8eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el9eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el10eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el8eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el10eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el9eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el10eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el10eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el9eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el8eap",
    "eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el8eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el9eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el9eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el9eap",
    "artemis-server",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el9eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el9eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el9eap",
    "eap8-jbossws-api-0:3.1.0-1.Final_redhat_00001.1.el10eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el9eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el8eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el10eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el10eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el9eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el9eap",
    "eap8-jackson-dataformats-text-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el9eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el10eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el8eap",
    "eap8-httpcomponents-asyncclient-0:4.1.5-5.redhat_00008.1.el8eap",
    "eap8-xml-security-0:3.0.6-1.redhat_00001.1.el10eap",
    "eap8-wildfly-javadocs-0:8.1.1-12.GA_redhat_00048.1.el8eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el10eap",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el10eap",
    "eap8-neethi-0:3.2.2-1.redhat_00001.1.el8eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el7eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el10eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el8eap",
    "eap7-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el10eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el10eap",
    "eap8-hibernate-0:6.6.54-1.Final_redhat_00001.1.el8eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el10eap",
    "eap7-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-ws-commons-XmlSchema-0:2.3.2-1.redhat_00001.1.el9eap",
    "eap8-parsson-0:1.1.9-1.redhat_00001.1.el8eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el8eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el8eap",
    "eap7-activemq-artemis-0:2.16.0-23.redhat_00058.1.el7eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el10eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jboss-remoting-0:5.0.31-1.SP2_redhat_00001.1.el9eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el10eap",
    "eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jackson-databind-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el10eap",
    "eap8-jsf-impl-0:4.0.11-2.SP1_redhat_00001.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el10eap",
    "eap8-undertow-0:2.3.26-2.SP3_redhat_00001.1.el8eap",
    "eap8-eap-product-conf-parent-0:801.8.0-1.GA_redhat_00001.1.el8eap",
    "eap8-jbossws-common-tools-0:2.2.0-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-spi-0:5.1.0-1.Final_redhat_00001.1.el10eap",
    "eap8-jackson-jaxrs-providers-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap8-jboss-logging-0:3.6.3-1.Final_redhat_00001.1.el9eap",
    "eap8-jackson-modules-java8-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el10eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el10eap",
    "eap7-jackson-databind-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el10eap",
    "eap8-artemis-wildfly-integration-0:2.0.5-1.Final_redhat_00001.1.el8eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el8eap",
    "eap7-wildfly-0:7.4.25-6.GA_redhat_00005.1.el9eap",
    "eap8-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el10eap",
    "eap7-jackson-annotations-0:2.18.9-1.redhat_00003.1.el9eap",
    "eap8-jakarta-xml-bind-api-0:4.0.5-1.redhat_00001.1.el8eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1.el8eap",
    "eap8-log4j-0:2.25.4-1.redhat_00003.1.el8eap",
    "eap8-netty-transport-native-epoll-0:4.1.136-1.Final_redhat_00001.1.el9eap",
    "eap8-wildfly-elytron-0:2.6.11-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el9eap",
    "eap8-jbossws-jaxws-undertow-httpspi-0:3.0.1-1.Final_redhat_00001.1el9eap",
    "eap8-activemq-artemis-0:2.40.0-8.redhat_00024.1.el9eap",
    "eap8-jackson-core-0:2.18.9-1.redhat_00003.1.el8eap",
    "eap8-netty-0:4.1.136-1.Final_redhat_00001.1.el8eap",
    "eap8-cryptacular-0:1.2.7-1.redhat_00002.1.el9eap",
    "eap8-slf4j-0:2.0.18-1.redhat_00001.1.el10eap",
    "eap8-jaxbintros-0:2.1.0-1.redhat_00001.1.el8eap",
    "eap8-jaxb-0:4.0.7-4.redhat_00001.1.el9eap",
    "eap8-apache-cxf-0:4.1.7-1.SP1_redhat_00001.1.el10eap",
    "eap8-nimbus-jose-jwt-0:9.37.4-1.redhat_00001.1.el8eap",
    "eap7-jackson-modules-base-0:2.18.9-1.redhat_00003.1.el7eap",
    "eap8-bouncycastle-0:1.85.0-1.redhat_00001.1.el8eap",
    "eap8-saaj-impl-0:3.0.6-1.redhat_00001.1.el8eap",
    "eap8-ironjacamar-0:3.0.22-1.Final_redhat_00001.1.el10eap"
  ],
  "bugzilla": "2477945",
  "bugzilla_description": "artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation",
  "cvss3_score": "8.2",
  "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-09-10T05:35:46Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-49362.json",
  "severity": "important"
}

Text

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation