mod_cluster-core vulnerabilities

CVEs whose affected-version data names the mod_cluster-core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-76166Medium· 4.3

2mo ago

Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram

A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but without the "Date:", "Digest:", and "Sequence:" …

▾ SunlitRed Hat · mod_cluster-coreEPSS 2.7%via CVEORG