DeutschShown in its original language — a full translation is planned for a future version.
Netty: Mehrere Schwachstellen
view advisory published 2026-08-09
Ein Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-76816US | — | — | ||
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topic… | ||||
| CVE-2026-62380US | high7.5 | — | ||
Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in th… | ||||
| CVE-2026-62243US | high7.5 | — | ||
Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client… | ||||
| CVE-2026-75596US | high7.5 | — | ||
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-… | ||||
| CVE-2026-59903US | high7.5 | Exploit | ||
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces a… | ||||
| CVE-2026-59902US | — | — | ||
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incom… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:62515 vom 2026-09-03external
- Red Hat Security Advisory RHSA-2026:62555 vom 2026-09-03external
- Red Hat Security Advisory RHSA-2026:63302 vom 2026-09-03external
- Red Hat Security Advisory RHSA-2026:66488 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66545 vom 2026-09-11external
- Red Hat Security Advisory RHSA-2026:68276 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:68280 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:69296 vom 2026-09-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan