CVE-2026-28367 - Vulnerability Analysis

Overview

Undertow contains an HTTP request smuggling vulnerability caused by improper handling of header block terminators, letting remote attackers manipulate web requests, exploit requires sending '\r\r\r' as header terminator.

Severity & Score

Impact

Remote attackers can manipulate or gain unauthorized access to web requests, potentially bypassing security controls.

Mitigation

Update to the latest version of Undertow.

References

• https://access.redhat.com/security/cve/CVE-2026-28367
• https://bugzilla.redhat.com/show_bug.cgi?id=2443260

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 27, 2026

🟠 CVE-2026-28367 - High (8.7) A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28367/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner