HIGH 8.7 Maven
Undertow is Vulnerable to HTTP Request/Response Smuggling
GHSA-3gv6-g396-9v4r · CVE-2026-28367
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending \r\r\r as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-28367
- WEB https://github.com/undertow-io/undertow/commit/3ece0bf2b2cf5e01db8ca25e41b831e66d3f5961
- WEB https://github.com/undertow-io/undertow/commit/904e26f1be62fb00b440538608a9574839821878
- WEB https://github.com/undertow-io/undertow/commit/c5dc41479e9c3576552d7e98e31bb1c237ae155e
- WEB https://access.redhat.com/errata/RHSA-2026:25125
- WEB https://access.redhat.com/errata/RHSA-2026:25126
- WEB https://access.redhat.com/security/cve/CVE-2026-28367
- WEB https://bugzilla.redhat.com/show_bug.cgi?id=2443260
- PACKAGE https://github.com/undertow-io/undertow
Ready to move
Start Securing
Free, no credit card | First findings in minutes