https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:58:19.273197+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21135 EUVD-2026-21135 2026-10-02T12:58:19.548173+00:00 EUVD-2026-21135 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3859 fkie_cve-2021-3859 2026-10-02T12:58:19.548214+00:00

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.

 https://cve.radiocsirt.org/vuln/ghsa-339q-62wm-c39w GHSA-339q-62wm-c39w — Undertow vulnerable to Denial of Service (DoS) attacks 2026-10-02T12:58:19.548245+00:00

Affected: Maven: io.undertow:undertow-core

Undertow client side invocation timeout raised when calling over HTTP2, this vulnerability can allow attacker to carry out denial of service (DoS) attacks in versions less than 2.2.15 Final.

 https://cve.radiocsirt.org/vuln/gsd-2021-3859 gsd-2021-3859 2026-10-02T12:58:19.548270+00:00 gsd-2021-3859 https://cve.radiocsirt.org/vuln/rhsa-2022:0400 RHSA-2022:0400 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.3 security update 2026-10-02T12:58:19.548283+00:00

undertow: client side invocation timeout raised when calling over HTTP2 7: Incomplete fix of CVE-2016-4978 in HornetQ library

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3859 UBUNTU-CVE-2021-3859 2026-10-02T12:58:19.548304+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 WID-SEC-W-2022-0607 — Red Hat FUSE: Mehrere Schwachstellen 2026-10-02T12:58:19.548334+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.