CVE-2025-9784

Test della vulnerabilità HTTP/2 CVE-2025-9784 MadeYouReset Panoramica Questo repository contiene uno script bash semplice ed efficace per testare la vulnerabilità CVE-2025-9784 nota come attacco "MadeYouReset" Denial of Service DoS HTTP/2 nelle implementazioni del server HTTP/2 Undertow. La...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF bypass Container Docker CVE-2026-21876 + PoC minimale. Ringrazio @airween e @fzipi separatamente per la loro rapida risposta! La correzione della vulnerabilità è stata pronta in pochissimo tempo. PoC Esegui: root@kitploit: cd springbootundertowstand or aspnetstand...

CVE-2026-56139

Riproduttore della divulgazione dello stack-trace di muteException in camel-undertow Rest DSL CVE-2026-56139 Questo progetto dimostra un problema di divulgazione di informazioni nel consumer Rest DSL di camel-undertow di Apache Camel, tracciato come CVE-2026-56139. L'opzione muteException control...

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow O Undertow é um servidor web Java baseado em I/O não bloqueante. Ele consiste em algumas partes diferentes: Um servidor HTTP principal que suporta I/O bloqueante e não bloqueante Uma implementação do Servlet 3.1 Uma implementação de web socket compatível com JSR-356 Website:...

CVE-2026-49365

CVE-2026-49365 — Divulgazione dello stack-trace di muteException in camel-netty-http / camel-undertow Reproducer proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime:...

CVE-2025-12543-Fix-for-Wildfly

Imagem Base WildFly 11.0.0.Final — Correção CVE-2025-12543 Visão Geral Este repositório fornece uma imagem Docker base construída sobre o WildFly 11.0.0.Final com uma correção portada para CVE-2025-12543 , uma vulnerabilidade crítica de validação do cabeçalho Host no Undertow. A imagem destina-se...

CVE-2026-78329

CVE-2026-78329 — Header-Filter-Strategie von camel-undertow nicht angewendet websocket.-Injection Ausführbarer Proof-of-Concept-Reproduzierer für die Apache-Camel-Schwachstelle, bei der UndertowEndpoint seine headerFilterStrategy standardmäßig auf die Basis-HttpHeaderFilterStrategy setzte und die...

CVE-2026-78329

CVE-2026-78329 is an improper input validation flaw in the Apache Camel Undertow component (camel-undertow) affecting versions from 4.11.0 before 4.14.9, 4.15.0 before 4.18.4, and 4.19.0 before 4.22.0. The UndertowEndpoint defaulted its headerFilterStrategy to the base HttpHeaderFilterStrategy, o...

EUVD-2026-64962

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and pushed...

PT-2026-80930

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and pushed...

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

UBUNTU-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

CVE-2026-19879 Io.undertow/undertow: undertow: http response header integrity issue due to character truncation

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

EUVD-2026-58670

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

CVE-2026-19879

Undertow contains a vulnerability in the HTTP response header writing path: the writeString() method narrows 16‑bit Unicode to 8‑bit bytes when writing header values, which can truncate characters to ASCII control/symbols and cause limited integrity impact or information disclosure if input isn’t...

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

PT-2026-72036

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

Linux Distros Unpatched Vulnerability : CVE-2026-19879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit...

Linux Distros Unpatched Vulnerability : CVE-2026-15554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared- secret authentication. This enables an unauthenticated...