<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 16:07:15 +0000</lastBuildDate>
    <item>
      <title>bdu:2026-09670</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2026-09670</link>
      <description>bdu:2026-09670</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2026-09670</guid>
    </item>
    <item>
      <title>EUVD-2026-364105</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-364105</link>
      <description>EUVD-2026-364105</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-364105</guid>
    </item>
    <item>
      <title>fkie_cve-2025-9784</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2025-9784</link>
      <description>&lt;p&gt;A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the &amp;#34;MadeYouReset&amp;#34; attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the &amp;#34;MadeYouReset&amp;#34; attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2025-9784</guid>
    </item>
    <item>
      <title>GHSA-95h4-w6j8-2rp8 — Undertow MadeYouReset HTTP/2 DDoS Vulnerability</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-95h4-w6j8-2rp8</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: io.undertow:undertow-core&lt;/p&gt;
&lt;p&gt;A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the &amp;#34;MadeYouReset&amp;#34; attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: io.undertow:undertow-core&lt;/p&gt;
&lt;p&gt;A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the &amp;#34;MadeYouReset&amp;#34; attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-95h4-w6j8-2rp8</guid>
    </item>
    <item>
      <title>RHSA-2025:23143 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14.2 for Spring Boot release.</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2025:23143</link>
      <description>&lt;p&gt;undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang tika-core: tika-parsers: tika-parser-pdf-module: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang tika-core: tika-parsers: tika-parser-pdf-module: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2025:23143</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2025-9784</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-9784</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: resteasy, Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: resteasy, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: resteasy, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: resteasy, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: resteasy and 3 more&lt;/p&gt;
&lt;p&gt;A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the &amp;#34;MadeYouReset&amp;#34; attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: resteasy, Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: resteasy, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: resteasy, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: resteasy, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: resteasy and 3 more&lt;/p&gt;
&lt;p&gt;A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the &amp;#34;MadeYouReset&amp;#34; attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-9784</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-2204 — NetApp ActiveIQ Unified Manager (Undertow): Schwachstelle ermöglicht Denial of Service</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2204</link>
      <description>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager und NetApp OnCommand Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager und NetApp OnCommand Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2204</guid>
    </item>
  </channel>
</rss>
