5.9
Moyenne
CVE-2026-93493 A flaw was found in Netty's `netty-handler-ssl-ocsp` component
Description
A flaw was found in Netty's `netty-handler-ssl-ocsp` component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol (OCSP) response that omits the optional `nextUpdate` field. This omission causes the OCSP validation to be silently skipped, leading to applications proceeding with an unvalidated certificate. This can result in a bypass of security controls where certificate validation is expected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat build of Apache Camel for Spring Boot 4 | Versions non publiées |
Autres CVE de Red Hat build of Apache Camel for Spring Boot 4
Les 106 CVE de Red Hat build of Apache Camel for Spring Boot 4 →
CVE-2026-91920
Undertow: undertow: chunkreader message length permits chunk-size overflow
6.5
Moyenne
CVE-2026-114370
Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal
3.7
Faible
CVE-2026-93562
Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
6.5
Moyenne
CVE-2026-93574
Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing
6.5
Moyenne