Lucene search
+L

CVE-2026-89044

🗓️ 10 Sep 2026 17:39:34Reported by VulnCheckType 
cve
 cve
🔗 web.nvd.nist.gov👁 228 Views

HTTP Request Smuggling in Netty 4.1.133-4.1.137 and 4.2.13-4.2.17 via Transfer-Encoding header.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilties in DevOps Test Hub
22 Oct 202607:19
–ibm
ibm
IBM Security Bulletins
Security Bulletin:Vulnerabilities exists in Netty package used by IBM Netezza Appliance
12 Oct 202607:55
–ibm
ibm
IBM Security Bulletins
Security Bulletin:Vulnerability in netty-codec-http may affect IBM Infosphere Change Data Capture (CVE-2026-89044)
26 Oct 202618:26
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty
9 Oct 202604:39
–ibm
ibm
IBM Security Bulletins
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
3 Nov 202616:08
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and Jackson
10 Nov 202607:52
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an OutOfMemoryError and HTTP Request/Response Smuggling in Netty (CVE-2026-89044, CVE-2026-93488)
22 Oct 202620:18
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for Oct 2026- Multiple CVEs addressed
6 Nov 202608:27
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
5 Oct 202606:17
–ibm
cgr
Chainguard
CVE-2026-89044 vulnerabilities
30 Sep 202620:54
–cgr
Rows per page
NVD
Vulners
CNA
Node
OR
nettynettyRange4.1.133–4.1.138
nettynettyRange4.2.13–4.2.18
[
  {
    "vendor": "netty",
    "product": "netty",
    "collectionURL": "https://repo1.maven.org/maven2/io/netty/netty-codec-http/",
    "repo": "https://github.com/netty/netty",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:maven/io.netty/netty-codec-http",
    "versions": [
      {
        "version": "4.1.133.Final",
        "lessThan": "4.1.138.Final",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "4.2.13.Final",
        "lessThan": "4.2.18.Final",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Sep 2026 18:17Current
7.2High risk
Vulners AI Score7.2
CVSS 3.16.5
CVSS 46.9
EPSS0.00284
SSVC
228