Skip to content

CVE record · 1 source

CVE-2026-91920

CVSS 6.5

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests.

Vendor: Red Hat
Product: Red Hat build of Apache Camel for Spring Boot 4, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Fuse 7
CVSS v3.1: 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weakness: CWE-444
Exposure class: Web platform, Developer platform, Operating system, Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CVE NVD 2d ago

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests.

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the…

CVSS 6.5 CVE-2026-91920 Red Hat