https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:36:06.060547+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373629 EUVD-2026-373629 2026-10-02T20:36:06.205207+00:00 EUVD-2026-373629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5680 fkie_cve-2026-5680 2026-10-02T20:36:06.205250+00:00

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer() method using exponential doubling, resulting in a Denial of Service (DoS) for the affected application.

 https://cve.radiocsirt.org/vuln/ghsa-28vh-mg6p-gxg7 GHSA-28vh-mg6p-gxg7 2026-10-02T20:36:06.205283+00:00

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer() method using exponential doubling, resulting in a Denial of Service (DoS) for the affected application.

 https://cve.radiocsirt.org/vuln/rhsa-2026:70228 RHSA-2026:70228 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update 2026-10-02T20:36:06.205299+00:00

bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller openjdk-orb: unauthed class loading via IIOP in EAP undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow jboss-remoting: jboss-remoting: integer overflow in MessageReader leads to pre-authentication denial of service wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method wildfly: wildfly-iiop: wildfly-jacorb: Wildfly: Pre-auth denial of service on the IIOP listener org.apache.cxf/cxf-rt-transports-jms: Apache CXF: Remote Code Execution via untrusted JMS configuration wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include artemis-server: undertow-core: wildfly-messaging-activemq-subsystem…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5680 UBUNTU-CVE-2026-5680 2026-10-02T20:36:06.205397+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer() method using exponential doubling, resulting in a Denial of Service (DoS) for the affected application.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3059 WID-SEC-W-2026-3059 — Red Hat Undertow: Schwachstelle ermöglicht Denial of Service 2026-10-02T20:36:06.205427+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Undertow ausnutzen, um einen Denial of Service Angriff durchzuführen.