https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:00:33.519805+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-07564 cnvd-2016-07564 2026-10-03T02:00:33.600361+00:00 cnvd-2016-07564 https://cve.radiocsirt.org/vuln/euvd-2026-84875 EUVD-2026-84875 2026-10-03T02:00:33.600417+00:00 EUVD-2026-84875 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4993 fkie_cve-2016-4993 2026-10-03T02:00:33.600431+00:00

CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-qcqr-hcjq-whfq GHSA-qcqr-hcjq-whfq — Improper Neutralization of CRLF Sequences in Wildfly Undertow 2026-10-03T02:00:33.600459+00:00

Affected: Maven: org.wildfly:wildfly-undertow

CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2016-4993 gsd-2016-4993 2026-10-03T02:00:33.600483+00:00 gsd-2016-4993 https://cve.radiocsirt.org/vuln/rhsa-2016:1838 RHSA-2016:1838 — Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 on RHEL 6 2026-10-03T02:00:33.600494+00:00

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags eap: HTTP header injection / response splitting EAP7 Privilege escalation when managing domain including earlier version slaves

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4993 UBUNTU-CVE-2016-4993 2026-10-03T02:00:33.600513+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow

CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.