Red hat data grid 8

This hub aggregates every CVE we track for Red hat data grid 8, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat data grid 8.

• CVE-2026-93562Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling6.5Sep 18, 2026
• CVE-2026-93574Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing6.5Sep 18, 2026
• CVE-2026-93579Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)6.5Sep 18, 2026
• CVE-2026-93573Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling6.5Sep 18, 2026
• CVE-2026-93568Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests7.5Sep 18, 2026
• CVE-2026-85511Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth24.2Sep 18, 2026
• CVE-2026-93569Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority8.2Sep 18, 2026
• CVE-2026-93567Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority7.5Sep 18, 2026
• CVE-2026-93566Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line6.5Sep 18, 2026
• CVE-2026-10832Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload5.9Sep 18, 2026
• CVE-2026-93565Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte7.5Sep 18, 2026
• CVE-2026-93558Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service7.5Sep 18, 2026
• CVE-2026-93492Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size5.3Sep 18, 2026
• CVE-2026-93491Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue7.5Sep 18, 2026
• CVE-2026-93488Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams7.5Sep 18, 2026