CVE-2026-81624

Name of the Vulnerable Software and Affected Versions Undertow (affected versions not specified)

Description A flaw exists in the way the web server handles WebSocket connections. Certain configuration limits, specifically message buffer sizes and session timeouts, cannot be adjusted and default to being unlimited. This allows a remote attacker to send excessive amounts of data or maintain connections indefinitely, which may lead to server crashes due to the exhaustion of memory or other system resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.