https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:28:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00261 bdu:2026-00261 https://cve.radiocsirt.org/vuln/bdu:2026-00261 https://cve.radiocsirt.org/vuln/euvd-2026-364330 EUVD-2026-364330 https://cve.radiocsirt.org/vuln/euvd-2026-364330 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12543 <p>A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.</p> <p>A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12543 https://cve.radiocsirt.org/vuln/ghsa-j382-5jj3-vw4j <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests. As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.</p> <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests. As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.</p> https://cve.radiocsirt.org/vuln/ghsa-j382-5jj3-vw4j https://cve.radiocsirt.org/vuln/rhsa-2026:0383 <p>undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF</p> <p>undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF</p> https://cve.radiocsirt.org/vuln/rhsa-2026:0383 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12543 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12543 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0054 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Zustand herbeizuführen, Daten zu manipulieren und um weitere Angriffe wie Cache-Poisoning und Session-Hijacking durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Zustand herbeizuführen, Daten zu manipulieren und um weitere Angriffe wie Cache-Poisoning und Session-Hijacking durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0054