https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:33:20.046168+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15466 bdu:2026-15466 2026-10-03T05:33:20.811914+00:00 bdu:2026-15466 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0901 certfr-2026-avi-0901 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T05:33:20.811958+00:00 certfr-2026-avi-0901 https://cve.radiocsirt.org/vuln/cleanstart-2026-at59511 Withdrawn: CLEANSTART-2026-AT59511 — Security fixes in cassandra-reaper-fips 4.0.2-r2 2026-10-03T05:33:20.812004+00:00

Withdrawn by the publisher.

Affected: CleanStart: cassandra-reaper-fips

Package cassandra-reaper-fips version 4.0.2-r2 fixes 20 vulnerabilities: ghsa-r7wm-3cxj-wff9, ghsa-72hv-8253-57qq, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514...

 https://cve.radiocsirt.org/vuln/euvd-2026-371759 EUVD-2026-371759 2026-10-03T05:33:20.812036+00:00 EUVD-2026-371759 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44249 fkie_cve-2026-44249 2026-10-03T05:33:20.812049+00:00

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

 https://cve.radiocsirt.org/vuln/ghsa-3qp7-7mw8-wx86 GHSA-3qp7-7mw8-wx86 — Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking 2026-10-03T05:33:20.812073+00:00

Affected: Maven: io.netty:netty-handler

### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions.

### Details `io.netty.handler.ipfilter.IpSubnetFilterRule#compareTo(java.net.InetSocketAddress)` method performs a bitwise AND between the incoming IP address and the configured networkAddress, instead of the subnetMask.

### Impact Access Control Bypass. Attacker can bypass IpSubnetFilter IPv6 access controls.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0325 NCSC-2026-0325 — Kwetsbaarheden verholpen in Atlassian producten 2026-10-03T05:33:20.812098+00:00 NCSC-2026-0325 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11033-1 openSUSE-SU-2026:11033-1 — netty-4.1.135-1.1 on GA media 2026-10-03T05:33:20.812211+00:00

netty-4.1.135-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:26017 RHSA-2026:26017 — Red Hat Security Advisory: Red Hat build of Quarkus 3.33.2.SP1 security update 2026-10-03T05:33:20.812237+00:00

eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44249 UBUNTU-CVE-2026-44249 2026-10-03T05:33:20.812275+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:Pro:22.04:LTS: netty, Ubuntu:Pro:24.04:LTS: netty, Ubuntu:25.10: netty, Ubuntu:Pro:26.04:LTS: netty

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1814 WID-SEC-W-2026-1814 — Netty: Mehrere Schwachstellen 2026-10-03T05:33:20.812306+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.