https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:05:24.623974+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375566 EUVD-2026-375566 2026-10-03T04:05:24.691471+00:00 EUVD-2026-375566 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93561 fkie_cve-2026-93561 2026-10-03T04:05:24.691507+00:00

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted response. This can lead to frame desynchronization and response smuggling, where one client's data may be inadvertently exposed to another client's response stream in proxy or cache environments.

 https://cve.radiocsirt.org/vuln/ghsa-7p33-hhxj-4qcr GHSA-7p33-hhxj-4qcr 2026-10-03T04:05:24.691541+00:00

Memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93561 UBUNTU-CVE-2026-93561 2026-10-03T04:05:24.691558+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:Pro:22.04:LTS: netty, Ubuntu:Pro:24.04:LTS: netty, Ubuntu:Pro:26.04:LTS: netty

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted response. This can lead to frame desynchronization and response smuggling, where one client's data may be inadvertently exposed to another client's response stream in proxy or cache environments.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3477 WID-SEC-W-2026-3477 — Netty: Mehrere Schwachstellen 2026-10-03T04:05:24.691589+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.