CVE-2026-28369 - Vulnerability Analysis

Overview

Undertow contains an HTTP request smuggling vulnerability caused by incorrect processing of header lines starting with spaces, letting remote attackers bypass security and manipulate requests, exploit requires crafted HTTP requests.

Severity & Score

Impact

Remote attackers can bypass security controls, access restricted data, or manipulate web caches, leading to unauthorized actions or data exposure.

Mitigation

Update to the latest version of Undertow.

References

• https://access.redhat.com/security/cve/CVE-2026-28369
• https://bugzilla.redhat.com/show_bug.cgi?id=2443262

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner