CVE-2026-3260

MEDIUM

5.9

Descripcion

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending an HTTP GET request containing multipart/form-data content. If the underlying application processes parameters using methods like `getParameterMap()`, the server prematurely parses and stores this content to disk. This could lead to resource exhaustion, potentially resulting in a Denial of Service (DoS).

Detalles CVE

Puntuacion CVSS v3.15.9

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Vector de ataqueNETWORK

ComplejidadHIGH

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado3/24/2026

Ultima modificacion4/8/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

redhat:build_of_apache_camel_-_hawtioredhat:build_of_apache_camel_for_spring_bootredhat:data_gridredhat:enterprise_linuxredhat:fuseredhat:jboss_enterprise_application_platformredhat:jboss_enterprise_application_platform_expansion_packredhat:process_automationredhat:single_sign-onredhat:undertow

Debilidades (CWE)

CWE-770

Referencias

https://access.redhat.com/security/cve/CVE-2026-3260(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2443010(secalert@redhat.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.