https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T15:41:26.472027+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372881 EUVD-2026-372881 2026-10-10T15:41:26.605561+00:00 EUVD-2026-372881 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28367 fkie_cve-2026-28367 2026-10-10T15:41:26.605620+00:00

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.

 https://cve.radiocsirt.org/vuln/ghsa-3gv6-g396-9v4r GHSA-3gv6-g396-9v4r — Undertow is Vulnerable to HTTP Request/Response Smuggling 2026-10-10T15:41:26.605659+00:00

Affected: Maven: io.undertow:undertow-parent

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.

 https://cve.radiocsirt.org/vuln/rhsa-2026:25125 RHSA-2026:25125 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update 2026-10-10T15:41:26.605690+00:00

org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests undertow: Undertow: Request smuggling via `\r\r\r` as a header block terminator undertow: Undertow: Request smuggling via inconsistent header parsing undertow: Undertow: Request Smuggling via Malformed HTTP Request Headers

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28367 UBUNTU-CVE-2026-28367 2026-10-10T15:41:26.605717+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0907 WID-SEC-W-2026-0907 — Red Hat Undertow: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsmaßnahmen 2026-10-10T15:41:26.605748+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Undertow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.