CVE-2026-3260

Published: Mar 24, 2026Modified: Jul 7, 2026

Description

Rejected reason: The Undertow web server enforces a default maximum HTTP request entity size limit. Any request (including GET or HEAD) containing a body that exceeds this configurable limit is safely dropped by the server, preventing single-request Resource Exhaustion (Out of Memory) Denial of Service attacks.

Affected Products (10)

CPE details will appear after the next data sync.

10 products

Build Of Apache Camel Hawtio

Build Of Apache Camel For Spring Boot

Enterprise Linux

Jboss Enterprise Application Platform

Jboss Enterprise Application Platform Expansion Pack

Process Automation

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

Timeline

No history available yet.