https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:38:00.346132+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-36236 cnvd-2020-36236 2026-10-02T22:38:00.606572+00:00 cnvd-2020-36236 https://cve.radiocsirt.org/vuln/euvd-2026-40001 EUVD-2026-40001 2026-10-02T22:38:00.606642+00:00 EUVD-2026-40001 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10705 fkie_cve-2020-10705 2026-10-02T22:38:00.606662+00:00

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-g4cp-h53p-v3v8 GHSA-g4cp-h53p-v3v8 — Allocation of Resources Without Limits or Throttling in Undertow 2026-10-02T22:38:00.606707+00:00

Affected: Maven: io.undertow:undertow-core

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2020-10705 gsd-2020-10705 2026-10-02T22:38:00.606735+00:00 gsd-2020-10705 https://cve.radiocsirt.org/vuln/oesa-2021-1422 OESA-2021-1422 — undertow security update 2026-10-02T22:38:00.606748+00:00

Affected: openEuler:20.03-LTS-SP1: undertow, openEuler:20.03-LTS-SP2: undertow

Java web server using non-blocking IO Security Fix(es): A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)(CVE-2019-3888) A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.(CVE-2020-10705) A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.(CVE-2020-10719)

 https://cve.radiocsirt.org/vuln/rhsa-2020:2058 RHSA-2020:2058 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 6 security update 2026-10-02T22:38:00.606777+00:00

jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header undertow: invalid HTTP request with large chunk size

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10705 UBUNTU-CVE-2020-10705 2026-10-02T22:38:00.606817+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2123 WID-SEC-W-2025-2123 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-02T22:38:00.606848+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen oder Dateien zu manipulieren.