Description
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.
Remediation
References
Related Vulnerabilities
Envoy Proxy CVE-2026-26310 Vulnerability (CVE-2026-26310)
WordPress Plugin Spectra-WordPress Gutenberg Blocks Multiple Security Bypass Vulnerabilities (2.3.0)
WordPress Plugin Import and export users and customers Security Bypass (1.15)
WordPress Plugin Paid Downloads 'download_key' Parameter SQL Injection (2.01)
WordPress Plugin WP-DBManager Arbitrary File Deletion (2.79.1)