https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:22:09.013507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09670 bdu:2026-09670 2026-10-03T04:22:09.327374+00:00 bdu:2026-09670 https://cve.radiocsirt.org/vuln/euvd-2026-364105 EUVD-2026-364105 2026-10-03T04:22:09.327430+00:00 EUVD-2026-364105 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9784 fkie_cve-2025-9784 2026-10-03T04:22:09.327446+00:00

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).

 https://cve.radiocsirt.org/vuln/ghsa-95h4-w6j8-2rp8 GHSA-95h4-w6j8-2rp8 — Undertow MadeYouReset HTTP/2 DDoS Vulnerability 2026-10-03T04:22:09.327480+00:00

Affected: Maven: io.undertow:undertow-core

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).

 https://cve.radiocsirt.org/vuln/rhsa-2025:23143 RHSA-2025:23143 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14.2 for Spring Boot release. 2026-10-03T04:22:09.327508+00:00

undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang tika-core: tika-parsers: tika-parser-pdf-module: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-9784 UBUNTU-CVE-2025-9784 2026-10-03T04:22:09.327530+00:00

Affected: Ubuntu:Pro:16.04:LTS: resteasy, Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: resteasy, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: resteasy, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: resteasy, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: resteasy and 3 more

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2204 WID-SEC-W-2025-2204 — NetApp ActiveIQ Unified Manager (Undertow): Schwachstelle ermöglicht Denial of Service 2026-10-03T04:22:09.327567+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager und NetApp OnCommand Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.