{"schema_version":1,"title":"Netty-Handler vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Netty-Handler: 0 in the last 7 days and 3 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-62243, was published on 22 August 2026. Nothing was published in the last eight weeks.","url":"https://junglewise.ai/threats/technologies/netty-handler","json_url":"https://junglewise.ai/threats/technologies/netty-handler.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/netty-handler","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":5,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":5},"latest":[{"cve":"CVE-2026-62243","cvss":7.5,"epss":0.0025,"slug":"cve-2026-62243-netty-tls-hostname-verification-bypass-in-openssl-client","title":"Netty TLS hostname verification bypass in OpenSSL client","severity":"high","exploited":false,"published_at":"2026-08-22T13:16:39.687+00:00","url":"https://junglewise.ai/threats/cve-2026-62243-netty-tls-hostname-verification-bypass-in-openssl-client"},{"cve":"CVE-2026-75596","cvss":7.5,"epss":0.0037,"slug":"cve-2026-75596-netty-quadratic-pre-handshake-clienthello-reassembly-in-sni","title":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.","severity":"high","exploited":false,"published_at":"2026-08-19T21:17:37.74+00:00","url":"https://junglewise.ai/threats/cve-2026-75596-netty-quadratic-pre-handshake-clienthello-reassembly-in-sni"},{"cve":"CVE-2026-75595","cvss":9.1,"epss":0.0032,"slug":"cve-2026-75595-netty-sni-routing-bypass-via-fragmented-tls-clienthello","title":"Netty SNI routing bypass via fragmented TLS ClientHello","severity":"critical","exploited":false,"published_at":"2026-08-19T21:17:37.563+00:00","url":"https://junglewise.ai/threats/cve-2026-75595-netty-sni-routing-bypass-via-fragmented-tls-clienthello"},{"cve":"CVE-2026-50010","cvss":7.5,"epss":0.0072,"slug":"cve-2026-50010-netty-disabled-tls-hostname-verification-in-netty-handler","title":"Netty disabled TLS hostname verification in netty-handler","severity":"high","exploited":false,"published_at":"2026-06-12T16:16:31.18+00:00","url":"https://junglewise.ai/threats/cve-2026-50010-netty-disabled-tls-hostname-verification-in-netty-handler"},{"cve":"CVE-2026-45416","cvss":7.5,"epss":0.0158,"slug":"cve-2026-45416-netty-excessive-memory-allocation-in-snihandler","title":"Netty excessive memory allocation in SNIHandler","severity":"high","exploited":false,"published_at":"2026-06-12T15:16:26.94+00:00","url":"https://junglewise.ai/threats/cve-2026-45416-netty-excessive-memory-allocation-in-snihandler"}],"weekly":[{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Netty","slug":"netty","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/netty"},{"name":"Netty-Codec-Http","slug":"netty-netty-codec-http","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/netty-netty-codec-http"},{"name":"Netty Codec HTTP/3","slug":"codec-http-3","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/codec-http-3"},{"name":"Netty-Codec-Http3","slug":"netty-codec-http3","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/netty-codec-http3"},{"name":"Netty TCNative","slug":"tcnative","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/tcnative"},{"name":"Netty-Resolver-Dns","slug":"netty-resolver-dns","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/netty-resolver-dns"}],"technology":{"hub":true,"name":"Netty-Handler","slug":"netty-handler","vendor":{"hub":true,"name":"Netty","slug":"netty","url":"https://junglewise.ai/threats/vendors/netty"},"aliases":[],"category":"library","description":"Java library providing network event handling and protocol support for the Netty framework.","url":"https://junglewise.ai/threats/technologies/netty-handler"},"most_severe":[{"cve":"CVE-2026-75595","cvss":9.1,"epss":0.0032,"slug":"cve-2026-75595-netty-sni-routing-bypass-via-fragmented-tls-clienthello","title":"Netty SNI routing bypass via fragmented TLS ClientHello","severity":"critical","exploited":false,"published_at":"2026-08-19T21:17:37.563+00:00","url":"https://junglewise.ai/threats/cve-2026-75595-netty-sni-routing-bypass-via-fragmented-tls-clienthello"},{"cve":"CVE-2026-45416","cvss":7.5,"epss":0.0158,"slug":"cve-2026-45416-netty-excessive-memory-allocation-in-snihandler","title":"Netty excessive memory allocation in SNIHandler","severity":"high","exploited":false,"published_at":"2026-06-12T15:16:26.94+00:00","url":"https://junglewise.ai/threats/cve-2026-45416-netty-excessive-memory-allocation-in-snihandler"},{"cve":"CVE-2026-50010","cvss":7.5,"epss":0.0072,"slug":"cve-2026-50010-netty-disabled-tls-hostname-verification-in-netty-handler","title":"Netty disabled TLS hostname verification in netty-handler","severity":"high","exploited":false,"published_at":"2026-06-12T16:16:31.18+00:00","url":"https://junglewise.ai/threats/cve-2026-50010-netty-disabled-tls-hostname-verification-in-netty-handler"},{"cve":"CVE-2026-75596","cvss":7.5,"epss":0.0037,"slug":"cve-2026-75596-netty-quadratic-pre-handshake-clienthello-reassembly-in-sni","title":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.","severity":"high","exploited":false,"published_at":"2026-08-19T21:17:37.74+00:00","url":"https://junglewise.ai/threats/cve-2026-75596-netty-quadratic-pre-handshake-clienthello-reassembly-in-sni"},{"cve":"CVE-2026-62243","cvss":7.5,"epss":0.0025,"slug":"cve-2026-62243-netty-tls-hostname-verification-bypass-in-openssl-client","title":"Netty TLS hostname verification bypass in OpenSSL client","severity":"high","exploited":false,"published_at":"2026-08-22T13:16:39.687+00:00","url":"https://junglewise.ai/threats/cve-2026-62243-netty-tls-hostname-verification-bypass-in-openssl-client"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}