CVE-2026-33870 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strin…
High CVSS: 7.5

CVE-2026-33870

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Versions 4.1.132.Final and 4.2.10.Final fix the issue.
Vendor
Netty
Product
Netty
CWE
CWE-444
Yayın Tarihi
2026-03-27 20:16:34
Güncelleme
2026-03-30 20:12:16
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-444 Netty HIGH Netty 2026

Referanslar

https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8 https://w4ke.info/2025/06/18/funky-chunks.html https://w4ke.info/2025/10/29/funky-chunks-2.html https://www.rfc-editor.org/rfc/rfc9110