CVE-2026-81624
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Aug 31, 2026
Vendor
unknown
Description
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a remote attacker to send large amounts of data or maintain connections indefinitely, potentially crashing the server by exhausting its memory or other resources.