by Kastro
Paper/Archive/CVE-2026-28369

CVE-2026-28369

Red Hat Red Hat JBoss Enterprise Application Platform 8.1.6 — Undertow: undertow: request smuggling via malformed http request headers

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 52.7.527 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can be exploited by a remote attacker to perform request smuggling. Request smuggling allows an attacker to bypass security mechanisms, access restricted information, or manipulate web caches, potentially leading to unauthorized actions or data exposure.

Affected

ProductAffectedFixed inSource
Red Hat JBoss Enterprise Application Platform 8.1.6see advisory2.3.24.SP2-redhat-00001CNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8see advisory0:2.40.0-7.redhat_00015.1.el8eapCNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8see advisory0:801.6.1-1.GA_redhat_00001.1.el8eapCNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8see advisory0:2.3.24-3.SP2_redhat_00001.1.el8eapCNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8see advisory0:8.1.6-7.GA_redhat_00010.1.el8eapCNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9see advisory0:2.40.0-7.redhat_00015.1.el9eapCNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9see advisory0:801.6.1-1.GA_redhat_00001.1.el9eapCNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9see advisory0:2.3.24-3.SP2_redhat_00001.1.el9eapCNA
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9see advisory0:8.1.6-7.GA_redhat_00010.1.el9eapCNA
Red Hat build of Apache Camel for Spring Boot 4see advisory–CNA
Red Hat build of Apache Camel - HawtIO 4see advisory–CNA
Red Hat Data Grid 8see advisory–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
redhat (CNA)8.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryaccess.redhat.com/errata/RHSA-2026:25125advisoryaccess.redhat.com/errata/RHSA-2026:25126refaccess.redhat.com/security/cve/CVE-2026-28369refbugzilla.redhat.com/show_bug.cgi?id=2443262