Project Subscriptions
| Vendors | Products |
|---|---|
|
Redhat
Subscribe
|
Build Keycloak
Subscribe
Build Of Apache Camel For Quarkus
Subscribe
Build Of Debezium 3
Subscribe
Build Of Keycloak
Subscribe
Build Of Quarkus
Subscribe
Camel Quarkus
Subscribe
Data Grid 8
Subscribe
Debezium
Subscribe
Jboss Data Grid
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Application Platform Expansion Pack
Subscribe
Jbosseapxp
Subscribe
Quarkus
Subscribe
Red Hat Single Sign On
Subscribe
|
No advisories yet.
Solution
No solution given by the vendor.
Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Fri, 21 Aug 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat build Of Apache Camel For Quarkus
Redhat build Of Debezium 3 Redhat build Of Keycloak Redhat build Of Quarkus Redhat data Grid 8 Redhat jboss Enterprise Application Platform Expansion Pack |
|
| Vendors & Products |
Redhat build Of Apache Camel For Quarkus
Redhat build Of Debezium 3 Redhat build Of Keycloak Redhat build Of Quarkus Redhat data Grid 8 Redhat jboss Enterprise Application Platform Expansion Pack |
Fri, 21 Aug 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 20 Aug 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords were intended to include those non-ASCII characters, leading to unauthorized access. | |
| Title | Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding | |
| First Time appeared |
Redhat
Redhat build Keycloak Redhat camel Quarkus Redhat debezium Redhat jboss Data Grid Redhat jboss Enterprise Application Platform Redhat jbosseapxp Redhat quarkus Redhat red Hat Single Sign On |
|
| Weaknesses | CWE-173 | |
| CPEs | cpe:/a:redhat:build_keycloak: cpe:/a:redhat:camel_quarkus:3 cpe:/a:redhat:debezium:3 cpe:/a:redhat:jboss_data_grid:8 cpe:/a:redhat:jboss_enterprise_application_platform:7 cpe:/a:redhat:jboss_enterprise_application_platform:8 cpe:/a:redhat:jbosseapxp cpe:/a:redhat:quarkus:3 cpe:/a:redhat:red_hat_single_sign_on:7 |
|
| Vendors & Products |
Redhat
Redhat build Keycloak Redhat camel Quarkus Redhat debezium Redhat jboss Data Grid Redhat jboss Enterprise Application Platform Redhat jbosseapxp Redhat quarkus Redhat red Hat Single Sign On |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2026-08-21T16:39:12.830Z
Reserved: 2026-08-12T11:04:06.893Z
Link: CVE-2026-19611
Updated: 2026-08-21T16:38:38.483Z
Status : Received
Published: 2026-08-20T16:17:18.293
Modified: 2026-08-21T17:16:30.193
Link: CVE-2026-19611
No data.
OpenCVE Enrichment
Updated: 2026-08-21T21:15:44Z