CVE-2026-85511

MediumCVSS 4.2/10Last modified Oct 20, 2026

Description

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-290

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Red HatRed Hat JBoss Enterprise Application Platform 8.1.8.GA—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8—

References

Timeline

Published
Sep 18, 2026
Last modified
Oct 20, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-855127.3A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the CVE-2026-855136.3A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_user_query_param_is_prCVE-2026-855146.3A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllCVE-2026-855158.2In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1CVE-2026-855167.3A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busproCVE-2026-855175.3A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_managCVE-2026-855186.1A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file pathCVE-2026-85524.3Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memoryCVE-2026-855209.3Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. ACVE-2026-855225.3A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of thCVE-2026-855238.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information TechnologieCVE-2026-855257.4Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as
CVE-2026-85511: Medium severity, CVSS 4.2 | Vulnix