EXPOSURES › CVE-2026-28368
CVE-2026-28368
HIGH
DETAIL
SourceNVD · cve
Published2026-03-27
CVSS8.7
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-28368 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
redhat · vendorbuild of apache camel - hawtio · productbuild of apache camel for spring boot · productdata grid · productenterprise linux · productfuse · productjboss enterprise application platform · productjboss enterprise application platform expansion pack · productprocess automation · productsingle sign-on · productundertow · product
DESCRIPTION
A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.