3 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-15565
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any...
CVE-2026-15565
creationtimestamp| type| source ---|---|--- 2026-08-11 09:30:39+00:00| seen| https://bsky.app/profile/suriq.io/post/3msscju2hf72d...
CVE-2026-15565 Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...