DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Undertow: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsmaßnahmen
view advisory published 2026-03-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Undertow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-28369US | critical9.1 | — | ||
A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping t… | ||||
| CVE-2026-28368US | critical9.1 | — | ||
A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to… | ||||
| CVE-2026-28367US | critical9.1 | — | ||
A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:25125 vom 2026-06-10external
- Red Hat Security Advisory RHSA-2026:25126 vom 2026-06-10external
- Red Hat Bugzilla vom 2026-03-29external
- Red Hat Bugzilla vom 2026-03-29external
- Red Hat Bugzilla vom 2026-03-29external
- WID-SEC-W-2026-0907 - CSAF Versionself
- WID-SEC-2026-0907 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan