Undertow — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• HPE Telco Service Activator Vulnerability Allows Access Control Bypass

  A vulnerability in HPE Telco Service Activator, reported on February 19, 2026, allows attackers to bypass access restrictions. The flaw is linked to improper input validation in the Undertow HTTP server core used by the…

  4 articles · Updated February 23, 2026
• Critical Undertow HTTP Server Vulnerability Enables Session Hijacking in Java Apps

  A critical vulnerability, tracked as CVE-2025-12543, has been identified in the Undertow HTTP server, affecting Java applications like WildFly and JBoss EAP. This flaw allows attackers to hijack user sessions, leading…

  2 articles · Updated January 9, 2026

Recent Intelligence Reports

• HPE Telco Service Activator Vulnerability Let Attackers Bypass Access Restrictions — Cybersecuritynews · February 23, 2026
• Undertow HTTP Server Used in Java Apps Vulnerability Allow Attackers to Hijack Sessions — Cybersecuritynews · January 9, 2026

Related Entities