Access Control Vulnerability in JBoss EAP by Red Hat
CVE-2026-19610

6.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Jboss Enterprise Application Platform 7
Red Hat Jboss Enterprise Application Platform 8
Red Hat Jboss Enterprise Application Platform Expansion Pack
Red Hat Single Sign-on 7
Vendor
CVE Published:
29 October 2026

What is CVE-2026-19610?

A security flaw exists within the platform-mbean component of JBoss EAP that compromises the integrity of Role-Based Access Control (RBAC) mechanisms. This vulnerability permits authenticated users with minimal privileges, such as those assigned the Monitor role, to gain visibility into sensitive system properties and JVM configuration details that should be protected. Consequently, this oversight poses a risk of exposing critical information that could be exploited by malicious entities.

References

https://access.redhat.com/security/cve/CVE-2026-19610
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2514537
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.