VDB
BDU%3A2026-00261
BDU%3A2026-00261
PUBLISHED
CVSS 9.699999809265137 CRITICAL
Уязвимость ядра HTTP-сервера Undertow, связанная с ошибками механизма проверки входных данных при обработке заголовков Host, позволяющая нарушителю осуществить SSRF-атаку
Risk Scores
CVSS 2.0
9.699999809265137
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | 0:2.0.2-1.Final_redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:4.0.10-1.redhat_00001.1.el8eap |
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:2.5.0-1.redhat_00001.1.el8eap |
| Red Hat | Red Hat Process Automation 7 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 | 0:2.2.39-1.Final_redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 | 0:7.4.24-4.GA_redhat_00002.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:2.0.2-1.Final_redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:1.0.1-3.redhat_00003.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:2.6.6-1.Final_redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | * |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:1.83.0-1.redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 | 0:7.4.24-4.GA_redhat_00002.1.el7eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:33.0.0-2.jre_redhat_00003.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | 0:1.83.0-1.redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | 0:33.0.0-2.jre_redhat_00003.1.el9eap |
…and 37 more
Timeline
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 9, 2026 CVE Published
- Jan 9, 2026 PoC Published
- Jan 9, 2026 PoC Published
- Jan 9, 2026 PoC Published
- Jan 10, 2026 PoC Published
- Jan 12, 2026 CVE Updated
- Jan 13, 2026 PoC Published
- Jan 13, 2026 PoC Published
- Jan 24, 2026 PoC Published
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2408784 url
- RHSA-2026:0383 vendor-advisory
- RHSA-2026:0384 vendor-advisory
- RHSA-2026:0386 vendor-advisory
- RHSA-2026:3889 vendor-advisory
- RHSA-2026:3890 vendor-advisory
- RHSA-2026:3891 vendor-advisory
- RHSA-2026:3892 vendor-advisory
- RHSA-2026:4915 vendor-advisory
- RHSA-2026:4916 vendor-advisory
- RHSA-2026:4917 vendor-advisory
- RHSA-2026:4924 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-12543 vdb