https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:11:54.465332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21477 EUVD-2026-21477 2026-10-04T17:11:54.690414+00:00 EUVD-2026-21477 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20220 fkie_cve-2021-20220 2026-10-04T17:11:54.690459+00:00

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/ghsa-qjwc-v72v-fq6r GHSA-qjwc-v72v-fq6r — HTTP request smuggling in Undertow 2026-10-04T17:11:54.690495+00:00

Affected: Maven: io.undertow:undertow-core

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/gsd-2021-20220 gsd-2021-20220 2026-10-04T17:11:54.690522+00:00 gsd-2021-20220 https://cve.radiocsirt.org/vuln/rhsa-2021:0872 RHSA-2021:0872 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update 2026-10-04T17:11:54.690535+00:00

guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20220 UBUNTU-CVE-2021-20220 2026-10-04T17:11:54.690564+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272 WID-SEC-W-2023-1272 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-04T17:11:54.690594+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.