Vulnerabilities

3 records

Sort

Advisory: Red Hat Data Grid 8, Red Hat Enterprise Linux 10 and 13 more products — RHSA-2026:25125 Clear all filters

TI-2026-22646 CVE-2026-28369 · GHSA-vqqj-9cmv-hx43

Undertow: undertow: request smuggling via malformed http request headers

MEDIUM 42

A flaw was found in Undertow.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00689 Published 2026-03-27 Partial fix · 2.3.24.SP2-redhat-00001, 2.40.0-7.redhat_00015.1.el8eap +9 CWE-444

TI-2026-22644 CVE-2026-28367 · GHSA-3gv6-g396-9v4r

Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator

MEDIUM 42

A flaw was found in Undertow.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00719 Published 2026-03-27 Partial fix · 2.3.24.SP2-redhat-00001, 2.40.0-7.redhat_00015.1.el8eap +9 CWE-444

TI-2026-22645 CVE-2026-28368 · GHSA-8v4x-mgvp-p658

Undertow: undertow: request smuggling via inconsistent header parsing

MEDIUM 43

A flaw was found in Undertow.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00732 Published 2026-03-27 Partial fix · 2.3.24.SP2-redhat-00001, 2.40.0-7.redhat_00015.1.el8eap +9 CWE-444

Vulnerabilities

Filters

Undertow: undertow: request smuggling via malformed http request headers

Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator

Undertow: undertow: request smuggling via inconsistent header parsing