https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:05:21.358073+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ji34331 CLEANSTART-2026-JI34331 — Netty versions 4 2026-10-02T14:05:21.458330+00:00

Affected: CleanStart: elasticsearch, CleanStart: sonarqube

CVE-2026-89044 affects multiple packages. Netty versions 4. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-371984 EUVD-2026-371984 2026-10-02T14:05:21.458382+00:00 EUVD-2026-371984 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89044 fkie_cve-2026-89044 2026-10-02T14:05:21.458399+00:00

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding headers across multiple lines or use values like 'chunked, xchunked' to bypass validation and decode messages as chunked when the final coding is not chunked, enabling request smuggling attacks.

 https://cve.radiocsirt.org/vuln/ghsa-77qf-r755-9gcw GHSA-77qf-r755-9gcw 2026-10-02T14:05:21.458426+00:00

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding headers across multiple lines or use values like 'chunked, xchunked' to bypass validation and decode messages as chunked when the final coding is not chunked, enabling request smuggling attacks.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11882-1 openSUSE-SU-2026:11882-1 — netty-4.1.138-1.1 on GA media 2026-10-02T14:05:21.458445+00:00

netty-4.1.138-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-89044 UBUNTU-CVE-2026-89044 2026-10-02T14:05:21.458478+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:Pro:22.04:LTS: netty, Ubuntu:Pro:24.04:LTS: netty, Ubuntu:Pro:26.04:LTS: netty

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding headers across multiple lines or use values like 'chunked, xchunked' to bypass validation and decode messages as chunked when the final coding is not chunked, enabling request smuggling attacks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3291 WID-SEC-W-2026-3291 — Netty: Mehrere Schwachstellen 2026-10-02T14:05:21.458509+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Denial-of-Service-Zustände zu verursachen, Sicherheitsmaßnahmen zu umgehen, Request- oder Response-Smuggling durchzuführen sowie Daten offenzulegen oder zu manipulieren.