CVEs classified under CWE-1035, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (13)
CVE-2026-93565 — CVSS 7.5 (high): A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in…
CVE-2026-93564 — CVSS 7.5 (high): A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send…
CVE-2026-93558 — CVSS 7.5 (high): A flaw was found in Netty's WebSocketServerExtensionHandler. A remote, unauthenticated attacker can exploit this vulnerability by using…
CVE-2026-93560 — CVSS 7.5 (high): A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header…
CVE-2026-93575 — CVSS 7.5 (high): A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted…
CVE-2026-93563 — CVSS 7.5 (high): A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP…
CVE-2026-93494 — CVSS 7.5 (high): A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted…
CVE-2026-93562 — CVSS 6.5 (medium): A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to…
CVE-2026-93579 — CVSS 6.5 (medium): A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line…
CVE-2026-93566 — CVSS 6.5 (medium): A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control…
CVE-2026-93561 — CVSS 6.5 (medium): A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as…
CVE-2026-93578 — CVSS 5.9 (medium): A flaw was found in Netty's Online Certificate Status Protocol (OCSP) Client. The client fails to verify the 'id-kp-OCSPSigning' Extended…
CVE-2026-93492 — CVSS 5.3 (medium): A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large…