← All Advisories

CVE-2026-93564

Last refreshed2026-10-03

Status: UPDATED  |  Advisory ID: CVE-2026-93564

Key Details

CVECVE-2026-93564
CVSS Score / Version7.5 (High) / CVSS v3.1
Updated2026-09-22
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Proseattack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected productssee table below

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat JBoss Enterprise Application Platform 7
Red HatRed Hat Single Sign-On 7
Red HatRed Hat build of Apache Camel for Spring Boot 4
Red HatRed Hat AMQ Broker 7
Red HatRed Hat build of Apache Camel 4 for Quarkus 3
Red HatRed Hat build of Apicurio Registry 3
Red HatRed Hat build of Debezium 3
Red HatRed Hat Build of Keycloak
Red HatRed Hat Fuse 7
SubsystemsGeneral OT
SectorsMultiple

What to Know

A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 headers. This can lead to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-93564
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-93564

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE