https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:07:34.004604+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372883 EUVD-2026-372883 2026-10-10T13:07:34.059336+00:00 EUVD-2026-372883 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28369 fkie_cve-2026-28369 2026-10-10T13:07:34.059379+00:00

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can be exploited by a remote attacker to perform request smuggling. Request smuggling allows an attacker to bypass security mechanisms, access restricted information, or manipulate web caches, potentially leading to unauthorized actions or data exposure.

 https://cve.radiocsirt.org/vuln/ghsa-vqqj-9cmv-hx43 GHSA-vqqj-9cmv-hx43 — Undertow is Vulnerable to HTTP Request/Response Smuggling 2026-10-10T13:07:34.059414+00:00

Affected: Maven: io.undertow:undertow-parent

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can be exploited by a remote attacker to perform request smuggling. Request smuggling allows an attacker to bypass security mechanisms, access restricted information, or manipulate web caches, potentially leading to unauthorized actions or data exposure.

 https://cve.radiocsirt.org/vuln/rhsa-2026:25125 RHSA-2026:25125 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update 2026-10-10T13:07:34.059440+00:00

org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests undertow: Undertow: Request smuggling via `\r\r\r` as a header block terminator undertow: Undertow: Request smuggling via inconsistent header parsing undertow: Undertow: Request Smuggling via Malformed HTTP Request Headers

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28369 UBUNTU-CVE-2026-28369 2026-10-10T13:07:34.059463+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can be exploited by a remote attacker to perform request smuggling. Request smuggling allows an attacker to bypass security mechanisms, access restricted information, or manipulate web caches, potentially leading to unauthorized actions or data exposure.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0907 WID-SEC-W-2026-0907 — Red Hat Undertow: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsmaßnahmen 2026-10-10T13:07:34.059491+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Undertow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.