https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:01:32.142439+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372882 EUVD-2026-372882 2026-10-10T18:01:32.191081+00:00 EUVD-2026-372882 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28368 fkie_cve-2026-28368 2026-10-10T18:01:32.191157+00:00

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.

 https://cve.radiocsirt.org/vuln/ghsa-8v4x-mgvp-p658 GHSA-8v4x-mgvp-p658 — Undertow is Vulnerable to HTTP Request/Response Smuggling 2026-10-10T18:01:32.191196+00:00

Affected: Maven: io.undertow:undertow-parent

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.

 https://cve.radiocsirt.org/vuln/rhsa-2026:25125 RHSA-2026:25125 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update 2026-10-10T18:01:32.191222+00:00

org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests undertow: Undertow: Request smuggling via `\r\r\r` as a header block terminator undertow: Undertow: Request smuggling via inconsistent header parsing undertow: Undertow: Request Smuggling via Malformed HTTP Request Headers

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28368 UBUNTU-CVE-2026-28368 2026-10-10T18:01:32.191278+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0907 WID-SEC-W-2026-0907 — Red Hat Undertow: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsmaßnahmen 2026-10-10T18:01:32.191311+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Undertow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.