CVE-2026-55995

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable. Mitigation If the iSNS service is not actively used...

CVE-2025-3260 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-3260 vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2026-3260 vulnerabilities

Vulnerabilities for packages: wildfly...

Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Undertow web server library

Summary Due to use of the Undertow web server library, DevOps Test Performance and Rational Performance Tester contain a potential Denial of Service DoS vulnerability. Vulnerability Details CVEID:CVE-2026-3260 DESCRIPTION: A flaw was found in Undertow. A remote attacker could exploit this...

CVE-2026-3260

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:14+00:00| seen| https://access.redhat.com/security/cve/CVE-2026-3260...

cc.jweb:jweb-adai (>=1.0.2, <=1.0.6), cc.jweb:jweb-boot (>=1.0.2, <=1.0.5) +7 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.0.34.final)

io.undertow:undertow-core MAVEN version 2.0.34.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cc.jweb:jweb-adai =1.0.2, =1.0.2, =1.1, =3.9.6, =3.9.12 - io.undertow:karaf 2.0.34.final -...

cc.uncarbon.framework:helio-starter-web (1.5.1), cn.eova:eova-web (>=1.1.1, <=1.1.5) +357 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.17.final)

io.undertow:undertow-core MAVEN version 2.2.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cc.uncarbon.framework:helio-starter-web 1.5.1 - cn.eova:eova-web =1.1.1, =2.7.0.rc1, =2.7.0.rc1,...

cn.cocook:cocook-mvc (>=0.0.4, <=1.0.2), com.networknt:audit (>=1.0.1, <=1.2.3) +81 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.4.4.final)

io.undertow:undertow-core MAVEN version 1.4.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cn.cocook:cocook-mvc =0.0.4, =1.0.1, =1.2.2, =1.0.1, =1.0.1, =1.2.2, =1.2.0, =1.1.0, =1.2.0, =1.1.0,...

cc.uncarbon.framework:helio-starter-web (>=1.7.0, <=1.7.1), ch.raffael.meldioc:meld-library-http-undertow (0.2.0) +593 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.19.final)

io.undertow:undertow-core MAVEN version 2.2.19.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cc.uncarbon.framework:helio-starter-web =1.7.0, =22.9.0, =22.9.0, =2.7.3.0, =2.7.3.0, =2.7.3.0,...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

com.palantir.atlasdb.examples:profile-client (>=0.1137.0, <=0.1159.0), com.palantir.atlasdb:atlasdb-api (>=0.1137.0, <=0.1159.0) +60 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.35.final)

io.undertow:undertow-core MAVEN version 2.2.35.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.palantir.atlasdb.examples:profile-client =0.1137.0, =0.1137.0, =0.1137.0, =0.1137.0, =0.1137.0,...

io.undertow:undertow-http2-test-suite (1.3.0.cr2), io.undertow:undertow-servlet (1.3.0.cr2) +52 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.cr2)

io.undertow:undertow-core MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr2 - io.undertow:undertow-servlet 1.3.0.cr2 -...

com.popokis:popok (0.1.0), io.mangoo:mangooio-benchmark (>=4.13.0-beta8, <=4.13.0-rc1) +42 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.0.6.final)

io.undertow:undertow-core MAVEN version 2.0.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.popokis:popok 0.1.0 - io.mangoo:mangooio-benchmark =4.13.0-beta8, =4.13.0-beta8, =4.13.0-beta8,...

ba.sake:sharaf-undertow_3 (0.20.0), be.yildiz-games:module-webserver-undertow (>=2.0.28, <=2.0.29) +78 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.4.3.final)

io.undertow:undertow-core MAVEN version 2.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - ba.sake:sharaf-undertow3 0.20.0 - be.yildiz-games:module-webserver-undertow =2.0.28, =26.9.1, =26.9.1,...

com.fizzed:ninja-undertow (5.7.0.undertow1), com.manywho.sdk:sdk-example (>=2.0.0-beta-01, <=2.0.0-snapshot-66) +9 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.24.final)

io.undertow:undertow-core MAVEN version 1.3.24.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fizzed:ninja-undertow 5.7.0.undertow1 - com.manywho.sdk:sdk-example =2.0.0-beta-01, =2.0.0-beta-01...

cc.uncarbon.framework:helio-starter-web (1.5.0), cloud.piranha.http:piranha-http-undertow (>=22.2.0, <=22.8.0) +321 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.16.final)

io.undertow:undertow-core MAVEN version 2.2.16.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cc.uncarbon.framework:helio-starter-web 1.5.0 - cloud.piranha.http:piranha-http-undertow =22.2.0,...

com.lihaoyi:cask_2.12 (>=0.0.1-19-3ff5a5, <=0.1.1), com.networknt:audit (>=1.5.18, <=1.5.28) +110 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.0.11.final)

io.undertow:undertow-core MAVEN version 2.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.lihaoyi:cask2.12 =0.0.1-19-3ff5a5, =1.5.18, =1.5.18, =1.5.19, =1.5.18, =1.5.18, =1.5.18, =1.5.18,...

be.yildiz-games:module-webserver-undertow (1.1.12), ch.raffael.meldioc:meld-library-http-undertow (0.1.7) +258 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.8.final)

io.undertow:undertow-core MAVEN version 2.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - be.yildiz-games:module-webserver-undertow 1.1.12 - ch.raffael.meldioc:meld-library-http-undertow 0.1.7 ...

io.undertow:karaf (2.0.40.final), io.undertow:undertow-dist (2.0.40.final) +2 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.0.40.final)

io.undertow:undertow-core MAVEN version 2.0.40.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:karaf 2.0.40.final - io.undertow:undertow-dist 2.0.40.final - io.undertow:undertow-servlet...