The vulnerability of the HttpClientCodec component in the networking application development framework allows attackers to compromise the integrity and accessibility of protected information, using Netty protocols.

🗓️ 15 Jul 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerability in the Hypertext Transfer Protocol Client Codec enables attackers to compromise protected information via Netty.

Reporter	Title	Published	Views	Family All 168
ibm	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
ibm	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty	21 May 202616:11	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	26 Jun 202606:15	–	ibm
ibm	Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.	23 Jun 202619:50	–	ibm
ibm	Security Bulletin: Due to the use of Netty, IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	11 Jun 202607:12	–	ibm
cgr	CVE-2026-42584 vulnerabilities	8 May 202601:17	–	cgr
circl	CVE-2026-42584	5 May 202618:11	–	circl
cnnvd	Netty 环境问题漏洞	13 May 202600:00	–	cnnvd
atlassian	HTTP Request Smuggling io.netty:netty-codec-http Dependency in Confluence Data Center	2 Jun 202616:30	–	atlassian
atlassian	HTTP Request Smuggling io.netty:netty-codec-http Dependency in Crowd Data Center	11 Jun 202617:31	–	atlassian

Vulners

Node

OR

red_hat red_hat_single_sign-onMatch7

red_hat red_hat_amq_brokerMatch7

red_hat red_hat_process_automationMatch7

red_hat red_hat_data_gridMatch8

red_hat red_hat_jboss_enterprise_application_platformMatch7

red_hat red_hat_build_of_optaplannerMatch8

red_hat red_hat_jboss_enterprise_application_platformMatch8

red_hat red_hat_fuseMatch7

red_hat red_hat_build_of_apicurio_registryMatch2

red_hat streams_for_apache_kafkaMatch3

red_hat red_hat_build_of_apicurio_registryMatch3

red_hat red_hat_build_of_debeziumMatch3

red_hat red_hat_build_of_quarkusMatch3.27.4

red_hat red_hat_build_of_quarkusMatch3.33.2

red_hat red_hat_build_of_apache_camel_for_spring_bootMatch3.5.16

red_hat red_hat_openshift_dev_spacesMatch3.29

red_hat red_hat_openshift_dev_spacesMatch3.28

red_hat red_hat_enterprise_linux_aiMatch3

Source	Link
access	www.access.redhat.com/security/cve/cve-2026-42584
github	www.github.com/advisories/GHSA-57rv-r2g8-2cj3
github	www.github.com/netty/netty
github	www.github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3
redos	www.redos.red-soft.ru/support/secure/
ubuntu	www.ubuntu.com/security/CVE-2026-42584
github	www.github.com/netty/netty/releases
web	www.web.nvd.nist.gov/view/vuln/detail

15 Jul 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 39.1

CVSS 29.4

EPSS0.0075

Hypertext Transfer Protocol Client Codec Netty protocol processing Processing deficiency