CVE-2026-15565

CVE-2026-15565 affects Undertow: a flaw enables a remote attacker to cause Out of Memory on a websockets endpoint without authentication for any @ServerEndpoint class that has an @OnMessage method, resulting in Denial of Service. The issue impacts the availability of the service (CVSS v3.1: AV:N/...