Vulnerability Description
Rejected reason: The Undertow web server enforces a default maximum HTTP request entity size limit. Any request (including GET or HEAD) containing a body that exceeds this configurable limit is safely dropped by the server, preventing single-request Resource Exhaustion (Out of Memory) Denial of Service attacks.
FAQ
What is CVE-2026-3260?
CVE-2026-3260 is a documented vulnerability. Rejected reason: The Undertow web server enforces a default maximum HTTP request entity size limit. Any request (including GET or HEAD) containing a body that exceeds this configurable limit is safely...
How severe is CVE-2026-3260?
CVSS scoring is not yet available for CVE-2026-3260. Check NVD for updates.
Is there a patch for CVE-2026-3260?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.