CVE-2026-28369Disclosure(redhat / build_of_apache_camel_-_hawtio)

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can be exploited by a remote attacker to perform request smuggling. Request smuggling allows an attacker to bypass security mechanisms, access restricted information, or manipulate web caches, potentially leading to unauthorized actions or data exposure.

redhat CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-444

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

build_of_apache_camel_-_hawtio
build_of_apache_camel_for_spring_boot
data_grid
enterprise_linux

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-03-27); latest day: 2
4 total mentions across 2 days

Affected systems

Vendors

redhat

Products

build_of_apache_camel_-_hawtiobuild_of_apache_camel_for_spring_bootdata_gridenterprise_linuxfusejboss_enterprise_application_platformjboss_enterprise_application_platform_expansion_packprocess_automationsingle_sign-onundertow

7 versions affected across 10 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-27	2	Disclosure2
2026-03-28	2	Disclosure1General1

Full discourse4 posts

White Rabbitx@TheRabbitPy194d
General
🚨 Undertow Req Smuggling CVSS: 8.6 HTTP request smuggling in Undertow server leads to session hijacking. Exploits header parsing diffs for cache poisoning and cross-site request forgery. https://nvd.nist.gov/vuln/detail/CVE-2026-28369
Post summary
The tweet provides a concise technical overview of CVE‑2026‑28369, highlighting its impact and CVSS score, but it offers no PoC, exploit code, active exploitation evidence, or patch information.
1000035
434 followersView on X
CVE@CVEnew195d
Disclosure
CVE-2026-28369 A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request … https://www.cve.org/CVERecord?id=CVE-2026-28369
Post summary
This statement discloses a parsing flaw in Undertow where HTTP requests with leading spaces in the first header line are incorrectly processed. No evidence of exploitation or mitigation is provided.
0000092
56.9K followersView on X
The Hacker Wire@TheHackerWire195d
Disclosure
🟠 CVE-2026-28369 - High A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leadin... https://www.thehackerwire.com/vulnerability/CVE-2026-28369/ https://t.co/3b62Ykm9ef
Post summary
The text announces a high‑severity flaw in Undertow where requests with leading spaces on the first header line are improperly processed.
0000037
163 followersView on X
CVEFind.com@CveFindCom195d
Disclosure
[CVE-2026-28369: HIGH] Flaw in Undertow allows remote attackers to perform request smuggling by manipulating HTTP headers, potentially leading to unauthorized actions or data exposure. #cybersecurity#cve,CVE-2026-28369,#cybersecurity https://cvefind.com/CVE-2026-28369
Post summary
The post announces CVE-2026-28369, a high‑severity Undertow request smuggling flaw that could allow unauthorized actions or data exposure, but it does not discuss a PoC, exploit, patch, or active exploitation.
0000047
617 followersView on X

CPE platform detail11 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

11 of 11 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	redhat	build_of_apache_camel_-_hawtio	4.0	-	-
App	redhat	build_of_apache_camel_for_spring_boot	4.0	-	-
App	redhat	data_grid	8.0	-	-
OS	redhat	enterprise_linux	9.0	-	-
App	redhat	fuse	7.0.0	-	-
App	redhat	jboss_enterprise_application_platform	7.0.0	-	-
App	redhat	jboss_enterprise_application_platform	8.0.0	-	-
App	redhat	jboss_enterprise_application_platform_expansion_pack	-	-	-
App	redhat	process_automation	7.0	-	-
App	redhat	single_sign-on	7.0	-	-
App	redhat	undertow	-	-	-

Explore more

Back to dashboard redhat CVEs build_of_apache_camel_-_hawtio vulnerabilities

What researchers are saying

CVE-2026-28369

White Rabbitx[verified]@TheRabbitPyGeneral

The tweet provides a concise technical overview of CVE‑2026‑28369, highlighting its impact and CVSS score, but it offers no PoC, exploit code, active exploitation evidence, or patch information.

CVE@CVEnewDisclosure

This statement discloses a parsing flaw in Undertow where HTTP requests with leading spaces in the first header line are incorrectly processed. No evidence of exploitation or mitigation is provided.

The Hacker Wire@TheHackerWireDisclosure

The text announces a high‑severity flaw in Undertow where requests with leading spaces on the first header line are improperly processed.

CVEFind.com@CveFindComDisclosure

The post announces CVE-2026-28369, a high‑severity Undertow request smuggling flaw that could allow unauthorized actions or data exposure, but it does not discuss a PoC, exploit, patch, or active exploitation.