https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:59:13.257364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00138 bdu:2026-00138 2026-10-05T00:59:13.486093+00:00 bdu:2026-00138 https://cve.radiocsirt.org/vuln/euvd-2026-363767 EUVD-2026-363767 2026-10-05T00:59:13.486141+00:00 EUVD-2026-363767 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5971 fkie_cve-2024-5971 2026-10-05T00:59:13.486156+00:00

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.

 https://cve.radiocsirt.org/vuln/ghsa-xpp6-8r3j-ww43 GHSA-xpp6-8r3j-ww43 — Undertow Denial of Service vulnerability 2026-10-05T00:59:13.486190+00:00

Affected: Maven: io.undertow:undertow-core

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected `0\r\n` termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.

 https://cve.radiocsirt.org/vuln/rhsa-2024:4392 RHSA-2024:4392 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.2 Security update 2026-10-05T00:59:13.486216+00:00

jose4j: denial of service via specially crafted JWE undertow: LearningPushHandler can lead to remote memory DoS attacks undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket httpd: CONTINUATION frames DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5971 UBUNTU-CVE-2024-5971 2026-10-05T00:59:13.486240+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3195 WID-SEC-W-2024-3195 — Oracle Communications: Mehrere Schwachstellen 2026-10-05T00:59:13.486268+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.