https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:57:03.626891+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00261 bdu:2026-00261 2026-10-04T07:57:03.977898+00:00 bdu:2026-00261 https://cve.radiocsirt.org/vuln/euvd-2026-364330 EUVD-2026-364330 2026-10-04T07:57:03.977955+00:00 EUVD-2026-364330 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12543 fkie_cve-2025-12543 2026-10-04T07:57:03.977970+00:00

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.

 https://cve.radiocsirt.org/vuln/ghsa-j382-5jj3-vw4j GHSA-j382-5jj3-vw4j — Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests 2026-10-04T07:57:03.978002+00:00

Affected: Maven: io.undertow:undertow-core

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests. As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.

 https://cve.radiocsirt.org/vuln/rhsa-2026:0383 RHSA-2026:0383 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.3 security update 2026-10-04T07:57:03.978030+00:00

undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12543 UBUNTU-CVE-2025-12543 2026-10-04T07:57:03.978052+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0054 WID-SEC-W-2026-0054 — Red Hat JBoss Enterprise Application Platform (Undertow): Mehrere Schwachstellen 2026-10-04T07:57:03.978082+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Zustand herbeizuführen, Daten zu manipulieren und um weitere Angriffe wie Cache-Poisoning und Session-Hijacking durchzuführen.