{"schema":"vulnpedia.research/1","cve":"CVE-2026-114370","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-114370","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T15:02:10.807Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T15:02:10.807Z","url":"https://access.redhat.com/security/cve/CVE-2026-114370"},{"source":"nvd","sourceId":"CVE-2026-114370","modified":"2026-10-22T15:25:35.333","url":"https://access.redhat.com/security/cve/CVE-2026-114370"},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-114370"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528757","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T15:02:10.807Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T15:02:10.807Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528757"},{"source":"nvd","sourceId":"CVE-2026-114370","modified":"2026-10-22T15:25:35.333","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528757"},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528757"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-114370","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-114370"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114370","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114370"}]},{"source":"euvd","sourceId":"EUVD-2026-107307","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107307","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-107307","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107307"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_build_of_apache_camel_for_spring_boot_4:undertow-servlet","product":"undertow-servlet as a component of Red Hat build of Apache Camel for Spring Boot 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:maven/io.undertow/undertow-servlet","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk11-openshift-rhel8","product":"jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 as a component of Red Hat JBoss Enterprise Application Platform 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/eap74-els-openjdk11-openshift-rhel8?repository_url=registry.redhat.io/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk17-openshift-rhel8","product":"jboss-eap-7/eap74-els-openjdk17-openshift-rhel8 as a component of Red Hat JBoss Enterprise Application Platform 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/eap74-els-openjdk17-openshift-rhel8?repository_url=registry.redhat.io/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk8-openshift-rhel8","product":"jboss-eap-7/eap74-els-openjdk8-openshift-rhel8 as a component of Red Hat JBoss Enterprise Application Platform 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/eap74-els-openjdk8-openshift-rhel8?repository_url=registry.redhat.io/jboss-eap-7/eap74-els-openjdk8-openshift-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_jboss_enterprise_application_platform_7:undertow-servlet","product":"undertow-servlet as a component of Red Hat JBoss Enterprise Application Platform 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/io.undertow/undertow-servlet","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_jboss_enterprise_application_platform_8:undertow-servlet","product":"undertow-servlet as a component of Red Hat JBoss Enterprise Application Platform 8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:maven/io.undertow/undertow-servlet","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_single_sign-on_7:undertow-servlet","product":"undertow-servlet as a component of Red Hat Single Sign-On 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:maven/io.undertow/undertow-servlet","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_fuse_7:undertow-servlet","product":"undertow-servlet as a component of Red Hat Fuse 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_cannot_be_controlled_by_adversary","purl":"pkg:maven/io.undertow/undertow-servlet","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_jboss_enterprise_application_platform_expansion_pack:undertow-servlet","product":"undertow-servlet as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:maven/io.undertow/undertow-servlet","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6","product":"resteasy-javadoc (pki-core:10.6) as a component of Red Hat Enterprise Linux 8","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-core:10.6","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6","product":"resteasy-javadoc (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-deps:10.6","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6","product":"resteasy.src (pki-core:10.6) as a component of Red Hat Enterprise Linux 8","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-core:10.6","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6","product":"resteasy.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-deps:10.6","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_8:resteasy::pki-core:10.6","product":"resteasy (pki-core:10.6) as a component of Red Hat Enterprise Linux 8","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/resteasy?rpmmod=pki-core:10.6","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6","product":"resteasy (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/resteasy?rpmmod=pki-deps:10.6","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_9:pki-resteasy-client","product":"pki-resteasy-client as a component of Red Hat Enterprise Linux 9","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/pki-resteasy-client","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_9:pki-resteasy-core","product":"pki-resteasy-core as a component of Red Hat Enterprise Linux 9","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/pki-resteasy-core","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider","product":"pki-resteasy-jackson2-provider as a component of Red Hat Enterprise Linux 9","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/pki-resteasy-jackson2-provider","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer","product":"pki-resteasy-servlet-initializer as a component of Red Hat Enterprise Linux 9","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/pki-resteasy-servlet-initializer","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]},{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json","productId":"red_hat_enterprise_linux_9:resteasy.src","product":"resteasy.src as a component of Red Hat Enterprise Linux 9","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/resteasy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-114370","modified":"2026-10-21T17:54:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114370.json"}]}],"vendorCoverage":{"total":20,"shown":20,"omitted":0,"source":"redhat"}}