Vulnerability in Red Hat Build Of Apache Camel For Spring Boot 4
CVE-2026-14180
A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the re…
Vulnerability class: HTTP Request Smuggling
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Red Hat Build Of Apache Camel For Spring Boot 4
- Red Hat Build Of Apache Camel - Hawtio 4
- Red Hat Data Grid 8
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Fuse 7
- Red Hat Jboss Enterprise Application Platform 7
- Red Hat Jboss Enterprise Application Platform 8
- Red Hat Jboss Enterprise Application Platform Expansion Pack
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
Frequently asked questions
- What is CVE-2026-14180?
- CVE-2026-14180 is a medium-severity vulnerability in Red Hat Build Of Apache Camel For Spring Boot 4, classified under Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling). CVSS score: 5.3/10. Published 2026-08-11.
- How severe is CVE-2026-14180?
- Medium severity. CVSS v3 base score is 5.3 out of 10.