https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:54:17.928077+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-364117 EUVD-2026-364117 2026-10-02T19:54:18.020558+00:00 EUVD-2026-364117 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3884 fkie_cve-2024-3884 2026-10-02T19:54:18.020608+00:00

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.

 https://cve.radiocsirt.org/vuln/ghsa-6h4f-pj3g-q8fq GHSA-6h4f-pj3g-q8fq — Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded 2026-10-02T19:54:18.020644+00:00

Affected: Maven: io.undertow:undertow-core

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.

 https://cve.radiocsirt.org/vuln/gsd-2024-3884 gsd-2024-3884 2026-10-02T19:54:18.020671+00:00 gsd-2024-3884 https://cve.radiocsirt.org/vuln/oesa-2026-1386 OESA-2026-1386 — undertow security update 2026-10-02T19:54:18.020683+00:00

Affected: openEuler:22.03-LTS-SP4: undertow

Java web server using non-blocking IO Security Fix(es):

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.(CVE-2024-3884)

A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service (DoS) attack.(CVE-2024-4027)

 https://cve.radiocsirt.org/vuln/rhsa-2026:0383 RHSA-2026:0383 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.3 security update 2026-10-02T19:54:18.020709+00:00

undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3884 UBUNTU-CVE-2024-3884 2026-10-02T19:54:18.020731+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0054 WID-SEC-W-2026-0054 — Red Hat JBoss Enterprise Application Platform (Undertow): Mehrere Schwachstellen 2026-10-02T19:54:18.020758+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Zustand herbeizuführen, Daten zu manipulieren und um weitere Angriffe wie Cache-Poisoning und Session-Hijacking durchzuführen.