The vulnerability of the SimpleTrustManagerFactory component in the TSL client framework for network application development, servers, and Netty protocol clients allows a attacker to carry out a type of “man-in-the-middle” attack.

🗓️ 19 Jun 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 17 Views

Signature verification flaws in transport layer security client enable man-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 198
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	2 Jul 202616:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-handler-4.1.133.Final.jar	30 Jun 202611:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to Improper Verification of Cryptographic Signature.	22 Jul 202607:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 1 of 2)	7 Jul 202607:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	25 Jun 202617:40	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance	10 Aug 202612:22	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty-handler-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-50010)	3 Aug 202606:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty (CVE-2026-50010,CVE-2026-50020,CVE-2026-45416 & CVE-2026-44249)	10 Jul 202605:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Aug 202614:48	–	ibm
Atlassian	Improper Verification of Cryptographic Signature at netty-handler dependency in Bamboo Data Center	24 Jun 202619:30	–	atlassian

Source	Link
dbugs	www.dbugs.ptsecurity.com/vulnerability/PT-2026-48902
github	www.github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9
dailycve	www.dailycve.com/netty-ionettynetty-handler-improper-certificate-validation-cve-2026-50010-high-dc-jun2026-437/
web	www.web.nvd.nist.gov/view/vuln/detail

19 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 37.5

CVSS 27.8

EPSS0.00456

signature verification transport layer security man in middle