The vulnerability of the HttpObjectDecoder decoder in the Netty framework, which is used for developing network applications, servers, and clients, allows a attacker to cause a service failure.

🗓️ 10 Aug 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The vulnerability of the HttpObjectDecoder decoder, a framework for developing network applications, servers, and clients using the Netty protocol, is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow an a...

Reporter	Title	Published	Views	Family All 197
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance	10 Aug 202609:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is is susceptible to multiple Netty vulnerabilities CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585	21 Jul 202621:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by multiple vulnerability in the netty-codec-http library that could allow an attacker to exploit integer overflow conditions when processing chunked HTTP requests(CVE-2026-42581, CVE-2026-42584).	31 Jul 202620:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty	21 May 202616:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.	23 Jun 202619:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty, IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	11 Jun 202607:12	–	ibm
Chainguard	CVE-2026-42581 vulnerabilities	8 May 202601:17	–	cgr

Vulners

Node

red_hat jboss_enterprise_application_platformMatch7

red_hat red_hat_single_sign-onMatch7

red_hat red_hat_amq_brokerMatch7

red_hat data_gridMatch8

red_hat red_hat_process_automationMatch7

red_hat red_hat_satelliteMatch6

red_hat red_hat_build_of_optaplannerMatch8

red_hat red_hat_fuseMatch7

red_hat red_hat_build_of_apache_camel_for_spring_bootMatch4

red_hat red_hat_build_of_apicurio_registryMatch2

red_hat cryostatMatch4

red_hat streams_for_apache_kafkaMatch2

red_hat streams_for_apache_kafkaMatch3

red_hat red_hat_build_of_apicurio_registryMatch3

red_hat red_hat_build_of_debeziumMatch3

red_hat jboss_enterprise_application_platformMatch8

red_hat red_hat_build_of_quarkusMatch3.27.4

red_hat red_hat_build_of_quarkusMatch3.33.2

red_hat openshift_dev_spacesMatch3.28

red_hat red_hat_build_of_apache_camel_for_quarkusMatch3

red_hat red_hat_enterprise_linux_aiMatch3

Source	Link
github	www.github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9
access	www.access.redhat.com/security/cve/cve-2026-42581
web	www.web.nvd.nist.gov/view/vuln/detail

10 Aug 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 39.8

CVSS 210

EPSS0.00607