CVE-2025-9784High· 7.5▾ MidnightPoC availableA flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive serv…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 41.3 · likelihood 0.5 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
2.2%
2.2% → 2.3%
1 GitHub repo
Last analysed / modified upstream
A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).
build_of_apache_camel_for_spring_bootfuse = 7.0.0jboss_enterprise_application_platform = 7.0.0jboss_enterprise_application_platform = 8.0.0jboss_enterprise_application_platform_expansion_packprocess_automation = 7.0single_sign-on = 7.0undertowenterprise_linux = 8.0enterprise_linux = 9.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
io.undertow:undertow-core < 2.2.38.Finalio.undertow:undertow-core >= 2.3.0.Alpha1, < 2.3.20.FinalPatched in:
io.undertow:undertow-core 2.2.38.Finalio.undertow:undertow-core 2.3.20.FinalSource: https://github.com/advisories/GHSA-95h4-w6j8-2rp8
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-7507High· 7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints
CVE-2026-7307High· 7.5A flaw was found in Keycloak
CVE-2026-4634High· 7.5A flaw was found in Keycloak
CVE-2026-19617Medium· 5.5A flaw was found in libdm
CVE-2026-11819Medium· 5.5Module: plugins/modules/keyring_info.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native keyring (GNOME Keyring, macOS Keychain, Windows Credential Manager) and pl…
CVE-2026-31431High· 7.8In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in op…