Undertow HTTP Server — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• HPE Telco Service Activator Vulnerability Allows Access Control Bypass

  A vulnerability in HPE Telco Service Activator, reported on February 19, 2026, allows attackers to bypass access restrictions. The flaw is linked to improper input validation in the Undertow HTTP server core used by the…

  4 articles · Updated February 23, 2026
• Critical Undertow HTTP Server Vulnerability Enables Session Hijacking in Java Apps

  A critical vulnerability, tracked as CVE-2025-12543, has been identified in the Undertow HTTP server, affecting Java applications like WildFly and JBoss EAP. This flaw allows attackers to hijack user sessions, leading…

  2 articles · Updated January 9, 2026

Recent Intelligence Reports

• HPE Security Alert Shows How Backend Bugs Can Break CX — Cxtoday · February 23, 2026
• Undertow HTTP Server Vulnerability Allows Attackers to Hijack Sessions in Java Apps — Cyberpress · January 9, 2026

Related Entities