ThreatCluster

Critical Undertow HTTP Server Vulnerability Enables Session Hijacking in Java Apps

First seen 9 Jan 2026, 17:57 UTC •CybersecuritynewsCyberpress •97% similarity •30

Article Content

Browse articles
ThreatCluster

A critical vulnerability, tracked as CVE-2025-12543, has been identified in the Undertow HTTP server, affecting Java applications like WildFly and JBoss EAP. This flaw allows attackers to hijack user sessions, leading to potential unauthorized access and compromise of internal systems.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Java JBoss EAP Undertow Undertow HTTP Server WildFly