{"id":"CVE-2026-91920","published":"2026-10-30T02:17:10.140","lastModified":"2026-10-30T02:17:10.267","description":"A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the value is shifted, allowing a specifically crafted 15-digit chunk size to bypass the limit and overflow into internal state flags. This can cause the server to terminate a request body prematurely and interpret the remaining data as a separate, smuggled request.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwes":["CWE-444"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-91920","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528758","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}