CVE-2026-91920

תיאור (מקור, אנגלית)

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the value is shifted, allowing a specifically crafted 15-digit chunk size to bypass the limit and overflow into internal state flags. This can cause the server to terminate a request body prematurely and interpret the remaining data as a separate, smuggled request.

מדדים

CVSS 3.1

6.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS — סבירות ניצול

0% (אחוזון 15) נכון ל-1 בנובמבר 2026

CWE

CWE-444

קישורים

• https://access.redhat.com/security/cve/CVE-2026-91920
• https://bugzilla.redhat.com/show_bug.cgi?id=2528758