PT-2026-27322 · Red Hat · Red Hat Data Grid 8+11

Published 2026-03-24 · Updated 2026-03-24 · CVE-2026-3260

NVD

CVSS v3.1

5.9

Medium

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending an HTTP GET request containing multipart/form-data content. If the underlying application processes parameters using methods like getParameterMap(), the server prematurely parses and stores this content to disk. This could lead to resource exhaustion, potentially resulting in a Denial of Service (DoS).

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-3260

Affected Products

Red Hat Data Grid 8

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Fuse 7

Red Hat Jboss Enterprise Application Platform 7

Red Hat Enterprise Application Platform 8

Red Hat Jboss Enterprise Application Platform Expansion Pack

Red Hat Process Automation 7

Red Hat Single Sign-On 7

Red Hat Build Of Apache Camel - Hawtio 4

Red Hat Build Of Apache Camel For Spring Boot 4

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-3260 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-3260 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2443010 · Note