Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority
Products / packages Red Hat Build of Apache Camel 3.33.3.SP2 · Red Hat Build of Debezium 3.6 · Red Hat build of Keycloak 26.4 · 16 more
Published
Severity and exploitation
KEV coverage does not rule out exploitation.
Assessment vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NSeverity
high7.5CVSS measures technical severity, not the likelihood of an attack.
Known exploitation
Not listed in the checked CISA KEV catalog
Absence from CISA KEV does not rule out attacks.
Public exploit
Not established by this record
Missing evidence does not mean no public exploit exists.
Remediation
Source guidance available
Review the recorded instructions. Guidance may be a workaround rather than a fixed version.
What this means
A flaw in Netty's HTTP/2 codec can lead to a malformed HTTP/2 CONNECT request when converting HTTP/1 CONNECT requests, potentially bypassing security controls. The weakness is due to improper input validation. Affected products and versions are not clearly specified.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Attack conditions
No attack-condition excerpt has been identified here. Review the full source description and references for authentication, network access, and configuration requirements.
Review supporting sources →Affected versions
Check the exact model, release, and any platform requirements against your installation.
Red Hat · redhat
Red Hat Build of Apache Camel 3.33.3.SP2
1 range
Red Hat · redhat
Red Hat Build of Apache Camel 3.33.3.SP2
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
4.1.138.Final-redhat-00001 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:apache_camel_quarkus:3.33Red Hat · redhat
Red Hat Build of Debezium 3.6
0 ranges
Red Hat · redhat
Red Hat Build of Debezium 3.6
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:debezium:3.6Red Hat · redhat
Red Hat build of Keycloak 26.4
1 range
Red Hat · redhat
Red Hat build of Keycloak 26.4
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
26.4.17-2 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.4::el9Red Hat · redhat
Red Hat build of Keycloak 26.4
1 range
Red Hat · redhat
Red Hat build of Keycloak 26.4
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
26.4-29 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.4::el9Red Hat · redhat
Red Hat build of Keycloak 26.4
1 range
Red Hat · redhat
Red Hat build of Keycloak 26.4
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
26.4-30 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.4::el9Red Hat · redhat
Red Hat build of Keycloak 26.4.17
0 ranges
Red Hat · redhat
Red Hat build of Keycloak 26.4.17
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.4::el9Red Hat · redhat
Red Hat build of Keycloak 26.6
1 range
Red Hat · redhat
Red Hat build of Keycloak 26.6
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
26.6.8-2 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.6::el9Red Hat · redhat
Red Hat build of Keycloak 26.6
1 range
Red Hat · redhat
Red Hat build of Keycloak 26.6
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
26.6-24 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.6::el9Red Hat · redhat
Red Hat build of Keycloak 26.6
1 range
Red Hat · redhat
Red Hat build of Keycloak 26.6
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
26.6-24 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.6::el9Red Hat · redhat
Red Hat build of Keycloak 26.6.8
0 ranges
Red Hat · redhat
Red Hat build of Keycloak 26.6.8
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:build_keycloak:26.6::el9Red Hat · redhat
Red Hat build of Quarkus 3.27.5.SP2
0 ranges
Red Hat · redhat
Red Hat build of Quarkus 3.27.5.SP2
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:quarkus:3.27::el8Red Hat · redhat
Red Hat build of Quarkus 3.33.3.SP2
0 ranges
Red Hat · redhat
Red Hat build of Quarkus 3.33.3.SP2
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:quarkus:3.33::el8Red Hat · redhat
Red Hat JBoss Enterprise Application Platform 8.1
0 ranges
Red Hat · redhat
Red Hat JBoss Enterprise Application Platform 8.1
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.0Red Hat · redhat
Red Hat AMQ Broker 7
0 ranges
Red Hat · redhat
Red Hat AMQ Broker 7
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:amq_broker:7Red Hat · redhat
Red Hat build of Apache Camel 4 for Quarkus 3
0 ranges
Red Hat · redhat
Red Hat build of Apache Camel 4 for Quarkus 3
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:camel_quarkus:3Red Hat · redhat
Red Hat build of Apache Camel for Spring Boot 4
0 ranges
Red Hat · redhat
Red Hat build of Apache Camel for Spring Boot 4
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:camel_spring_boot:4Red Hat · redhat
Red Hat build of Apicurio Registry 3
0 ranges
Red Hat · redhat
Red Hat build of Apicurio Registry 3
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:apicurio_registry:3Red Hat · redhat
Red Hat Data Grid 8
0 ranges
Red Hat · redhat
Red Hat Data Grid 8
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:jboss_data_grid:8Red Hat · redhat
Red Hat Fuse 7
0 ranges
Red Hat · redhat
Red Hat Fuse 7
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:jboss_fuse:7Red Hat · redhat
Red Hat JBoss Enterprise Application Platform 7
0 ranges
Red Hat · redhat
Red Hat JBoss Enterprise Application Platform 7
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:jboss_enterprise_application_platform:7Red Hat · redhat
Red Hat JBoss Enterprise Application Platform 8
0 ranges
Red Hat · redhat
Red Hat JBoss Enterprise Application Platform 8
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:jboss_enterprise_application_platform:8Red Hat · redhat
Red Hat JBoss Enterprise Application Platform Expansion Pack
0 ranges
Red Hat · redhat
Red Hat JBoss Enterprise Application Platform Expansion Pack
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:jbosseapxpRed Hat · redhat
Red Hat Single Sign-On 7
0 ranges
Red Hat · redhat
Red Hat Single Sign-On 7
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:red_hat_single_sign_on:7What to do
Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.
See https://github.com/netty/netty/security/advisories/GHSA-45h4-vhwh-fmhg for fixed versions and remediation guidance.
cve.new guidance unless attributed to a publisher. This page does not inspect your installation.
Public exploit evidence
No public exploit reference is identified in the imported evidence. This is not a claim that no exploit exists.
Original source description
Read the full publisher description
A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leading to a malformed HTTP/2 CONNECT request. This can bypass security controls such as tunnel allow-lists or egress policies, resulting in integrity loss.
References
11 sourcesView 5 more references
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-93567View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
Timeline
All times UTCAdvisory published
Publication date supplied by the source.
Source updated
Latest modification date supplied by the source.
Last imported by cve.new
Latest catalog import, not the date we first saw this advisory.
What changed
Follow changes- CVE · CVE-2026-93567
Observed 2026-11-06T18:03:32.804Z · upstream updated 2026-11-06T17:12:26.608Z
Product or version evidence changed
before
[ { "vendor": "Red Hat", "name": "Red Hat Build of Apache Camel 3.33.3.SP2", "platforms": [], "versions": [ { "version": "4.1.138.Final-redhat-00001", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apache_camel_quarkus:3.33" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Build of Debezium 3.6", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:debezium:3.6" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4-29", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4.17-2", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4-30", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.6.8", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.6::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.27.5.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.27::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.33.3.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.33::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8.1", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.0" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat AMQ Broker 7", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:amq_broker:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel 4 for Quarkus 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_quarkus:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel for Spring Boot 4", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_spring_boot:4" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apicurio Registry 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apicurio_registry:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Data Grid 8", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_data_grid:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Fuse 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_fuse:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jbosseapxp" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Single Sign-On 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:red_hat_single_sign_on:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" } ]after
[ { "vendor": "Red Hat", "name": "Red Hat Build of Apache Camel 3.33.3.SP2", "platforms": [], "versions": [ { "version": "4.1.138.Final-redhat-00001", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apache_camel_quarkus:3.33" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Build of Debezium 3.6", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:debezium:3.6" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4.17-2", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4-29", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4-30", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4.17", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.6", "platforms": [], "versions": [ { "version": "26.6.8-2", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.6::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.6", "platforms": [], "versions": [ { "version": "26.6-24", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.6::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.6", "platforms": [], "versions": [ { "version": "26.6-24", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.6::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.6.8", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.6::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.27.5.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.27::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.33.3.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.33::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8.1", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.0" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat AMQ Broker 7", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:amq_broker:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel 4 for Quarkus 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_quarkus:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel for Spring Boot 4", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_spring_boot:4" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apicurio Registry 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apicurio_registry:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Data Grid 8", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_data_grid:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Fuse 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_fuse:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jbosseapxp" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Single Sign-On 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:red_hat_single_sign_on:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" } ]References changed
before
[ "https://access.redhat.com/errata/RHSA-2026:69440", "https://access.redhat.com/errata/RHSA-2026:69470", "https://access.redhat.com/errata/RHSA-2026:70257", "https://access.redhat.com/errata/RHSA-2026:83612", "https://access.redhat.com/errata/RHSA-2026:95221", "https://access.redhat.com/errata/RHSA-2026:95760", "https://access.redhat.com/errata/RHSA-2026:95761", "https://access.redhat.com/security/cve/CVE-2026-93567", "https://bugzilla.redhat.com/show_bug.cgi?id=2536955" ]
after
[ "https://access.redhat.com/errata/RHSA-2026:69440", "https://access.redhat.com/errata/RHSA-2026:69470", "https://access.redhat.com/errata/RHSA-2026:70257", "https://access.redhat.com/errata/RHSA-2026:83612", "https://access.redhat.com/errata/RHSA-2026:95221", "https://access.redhat.com/errata/RHSA-2026:95759", "https://access.redhat.com/errata/RHSA-2026:95760", "https://access.redhat.com/errata/RHSA-2026:95761", "https://access.redhat.com/errata/RHSA-2026:95762", "https://access.redhat.com/security/cve/CVE-2026-93567", "https://bugzilla.redhat.com/show_bug.cgi?id=2536955" ]
- CVE · CVE-2026-93567
Observed 2026-11-06T10:31:03.727Z · upstream updated 2026-11-06T10:23:40.431Z
Product or version evidence changed
before
[ { "vendor": "Red Hat", "name": "Red Hat Build of Apache Camel 3.33.3.SP2", "platforms": [], "versions": [ { "version": "4.1.138.Final-redhat-00001", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apache_camel_quarkus:3.33" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Build of Debezium 3.6", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:debezium:3.6" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.27.5.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.27::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.33.3.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.33::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8.1", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.0" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat AMQ Broker 7", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:amq_broker:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel 4 for Quarkus 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_quarkus:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel for Spring Boot 4", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_spring_boot:4" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apicurio Registry 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apicurio_registry:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Build of Keycloak", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Data Grid 8", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_data_grid:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Fuse 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_fuse:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jbosseapxp" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Single Sign-On 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:red_hat_single_sign_on:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" } ]after
[ { "vendor": "Red Hat", "name": "Red Hat Build of Apache Camel 3.33.3.SP2", "platforms": [], "versions": [ { "version": "4.1.138.Final-redhat-00001", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apache_camel_quarkus:3.33" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Build of Debezium 3.6", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:debezium:3.6" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4-29", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4.17-2", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.4", "platforms": [], "versions": [ { "version": "26.4-30", "status": "unaffected", "lessThan": "*", "versionType": "rpm" } ], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.4::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Keycloak 26.6.8", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:build_keycloak:26.6::el9" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.27.5.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.27::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Quarkus 3.33.3.SP2", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:quarkus:3.33::el8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8.1", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.0" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat AMQ Broker 7", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:amq_broker:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel 4 for Quarkus 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_quarkus:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apache Camel for Spring Boot 4", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:camel_spring_boot:4" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat build of Apicurio Registry 3", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:apicurio_registry:3" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Data Grid 8", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_data_grid:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Fuse 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_fuse:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform 8", "platforms": [], "versions": [], "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:jboss_enterprise_application_platform:8" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jbosseapxp" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" }, { "vendor": "Red Hat", "name": "Red Hat Single Sign-On 7", "platforms": [], "versions": [], "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:red_hat_single_sign_on:7" ], "source": "redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93567" } ]References changed
before
[ "https://access.redhat.com/errata/RHSA-2026:69440", "https://access.redhat.com/errata/RHSA-2026:69470", "https://access.redhat.com/errata/RHSA-2026:70257", "https://access.redhat.com/errata/RHSA-2026:83612", "https://access.redhat.com/errata/RHSA-2026:95221", "https://access.redhat.com/security/cve/CVE-2026-93567", "https://bugzilla.redhat.com/show_bug.cgi?id=2536955" ]
after
[ "https://access.redhat.com/errata/RHSA-2026:69440", "https://access.redhat.com/errata/RHSA-2026:69470", "https://access.redhat.com/errata/RHSA-2026:70257", "https://access.redhat.com/errata/RHSA-2026:83612", "https://access.redhat.com/errata/RHSA-2026:95221", "https://access.redhat.com/errata/RHSA-2026:95760", "https://access.redhat.com/errata/RHSA-2026:95761", "https://access.redhat.com/security/cve/CVE-2026-93567", "https://bugzilla.redhat.com/show_bug.cgi?id=2536955" ]
Large field values are marked as truncated previews. Original source snapshots remain retained.
Showing up to 50 most recent observed changes.