The vulnerability of the framework for developing network applications, servers, and client protocols related to Netty, arises from the unlimited distribution of resources, allowing attackers to cause service failures.

🗓️ 28 Sep 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Unlimited resource distribution in Netty framework allows attackers to cause service failures.

Reporter	Title	Published	Views	Family All 533
IBM Security Bulletins	Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance	12 Aug 202608:51	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty-codec-http2-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-50560)	3 Aug 202608:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	25 Jun 202617:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for Aug 2026- Multiple CVEs addressed	4 Sep 202614:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in third-party Netty libraries affect the IBM Informix Wire Listener.	17 Aug 202608:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.	20 Aug 202615:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	19 Aug 202616:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	15 Sep 202615:20	–	ibm
Chainguard	CVE-2026-50560 vulnerabilities	16 Jun 202614:16	–	cgr

Vulners

Node

OR

red_hat,red_hat_single_sign-onMatch7

red_hat,red_hat_amq_brokerMatch7

red_hat,red_hat_data_gridMatch8

red_hat,red_hat_jboss_enterprise_application_platformMatch7

red_hat,red_hat_fuseMatch7

red_hat,red_hat_build_of_apache_camel_for_spring_bootMatch4

red_hat,cryostatMatch4

red_hat,streams_for_apache_kafkaMatch2

red_hat,streams_for_apache_kafkaMatch3

red_hat,red_hat_build_of_apicurio_registryMatch3

red_hat,red_hat_build_of_debeziumMatch3

red_hat,red_hat_build_of_apache_camel_-_hawtioMatch4

red_hat,red_hat_jboss_enterprise_application_platformMatch8.1

apache nettyRange<4.1.135

apache nettyRange4.2.0–4.2.15

red_hat,red_hat_build_of_quarkusMatch3.27.4.sp1

red_hat,red_hat_build_of_quarkusMatch3.33.2.sp1

Source	Link
github	www.github.com/netty/netty
github	www.github.com/netty/netty/releases/tag/netty-4.1.135.Final
github	www.github.com/netty/netty/releases/tag/netty-4.2.15.Final
github	www.github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm
rfc-editor	www.rfc-editor.org/rfc/rfc9113.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-50560
deb	www.deb.freexian.com/extended-lts/tracker/CVE-2026-50560
access	www.access.redhat.com/security/cve/CVE-2026-50560
repo	www.repo.red-soft.ru/redos/8.0/x86_64/updates/
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/

28 Sep 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25

CVSS 35.3

EPSS0.00524

Netty unlimited resource distribution service interruption