https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:40:28.717275+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01315 bdu:2024-01315 2026-10-03T08:40:28.967615+00:00 bdu:2024-01315 https://cve.radiocsirt.org/vuln/euvd-2026-214249 EUVD-2026-214249 2026-10-03T08:40:28.967657+00:00 EUVD-2026-214249 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4639 fkie_cve-2023-4639 2026-10-03T08:40:28.967672+00:00

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/ghsa-3jrv-jgp8-45v3 GHSA-3jrv-jgp8-45v3 — Undertow incorrectly parses cookies 2026-10-03T08:40:28.967700+00:00

Affected: Maven: io.undertow:undertow-core

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/gsd-2023-4639 gsd-2023-4639 2026-10-03T08:40:28.967725+00:00 gsd-2023-4639 https://cve.radiocsirt.org/vuln/rhsa-2024:1674 RHSA-2024:1674 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update 2026-10-03T08:40:28.967738+00:00

undertow: unrestricted request storage leads to memory exhaustion undertow: Cookie Smuggling/Spoofing ssh: Prefix truncation attack on Binary Packet Protocol (BPP) undertow: directory traversal vulnerability undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4639 UBUNTU-CVE-2023-4639 2026-10-03T08:40:28.967763+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1084 WID-SEC-W-2024-1084 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T08:40:28.967793+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.