Red Hat Undertow Multiple Security Vulnerabilities

CERT-Bund published a security advisory documenting multiple vulnerabilities in Red Hat Undertow, a lightweight web server for modern web applications. The vulnerabilities have a CVSS Base Score of 8.7 (high) with Remote Attack capability, allowing threat actors to bypass security controls, manipulate data, and expose sensitive information without authentication. The advisory identifies CVE identifiers and provides links to further information, versions history, and feedback channels.

Organizations using Red Hat Undertow should immediately inventory their systems for affected versions, apply available patches or workarounds from Red Hat, and monitor for updates from CERT-Bund. This advisory is informational in nature—CERT-Bund indicates no mitigation is currently available, suggesting entities using this software should evaluate compensating controls and monitor vendor channels for security patches.