1677 matches found
undertow-io__undertow_CVE-2014-7816_1-0-16-Final
Undertow Undertow is a Java web server based on non-blocking IO. It consists of a few different parts: A core HTTP server that supports both blocking and non-blocking IO A Servlet 3.1 implementation A JSR-356 compliant web socket implementation Website: http://undertow.io Issues:...
CVE-2026-56139
camel-undertow Rest DSL muteException स्टैक-ट्रेस प्रकटीकरण पुनरुत्पादक CVE-2026-56139 यह प्रोजेक्ट Apache Camel के camel-undertow Rest DSL उपभोक्ता में information-disclosure समस्या को प्रदर्शित करता है, जिसे CVE-2026-56139 के रूप में ट्रैक किया गया है। muteException विकल्प नियंत्रित करता है कि...
CVE-2026-49365
CVE-2026-49365 — camel-netty-http / camel-undertow muteException Stack-Trace Disclosure Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...
CVE-2025-9784
CVE-2025-9784 MadeYouReset HTTP/2 Vulnerability Test Overview This repository contains a simple and effective bash script to test for the CVE-2025-9784 vulnerability known as the "MadeYouReset" HTTP/2 Denial of Service DoS attack in Undertow HTTP/2 server implementations. The vulnerability allows...
CVE-2026-21876
CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC Run: root@kitploit: cd springbootundertowstand or aspnetstand docker compose ...
CVE-2025-12543-Fix-for-Wildfly
WildFly 11.0.0.Final Base Image — CVE-2025-12543 Patch Overview This repository provides a Docker base image built on WildFly 11.0.0.Final with a backported fix for CVE-2025-12543 , a critical Host header validation vulnerability in Undertow. The image is intended to be provided to colleagues as ...
CVE-2026-78329
CVE-2026-78329 — camel-undertow header filter strategy not applied websocket. injection Runnable proof-of-concept reproducer for the Apache Camel vulnerability where UndertowEndpoint defaulted its headerFilterStrategy to the base HttpHeaderFilterStrategy and pushed that instance into the...
CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
UBUNTU-CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
CVE-2026-81624 Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
CVE-2026-81624
Undertow , the web server used in JBoss EAP and WildFly , contains a flaw in how it handles WebSocket connections . Specifically, configuration limits such as message buffer sizes and session timeouts default to being unlimited and cannot be adjusted, allowing a remote, unauthenticated attacker t...
EUVD-2026-68411
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
Linux Distros Unpatched Vulnerability : CVE-2026-81624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certai...
DEBIAN-CVE-2026-5680
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...
CVE-2026-5680
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...
UBUNTU-CVE-2026-5680
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...
CVE-2026-5680
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...