Vert.x has a DoS via unbounded server-side SNI SslContext cache growth

🗓️ 09 May 2026 00:38:30Reported by GitHub Advisory DatabaseType

Vert.x TLS can unboundedly grow server-side SNI cache, enabling a denial of service with many SNI names; affected 4.3.4–5.0.8.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	18 Jun 202606:07	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in vertx-core-4.5.24.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-6860)	29 May 202608:56	–	ibm
ATTACKERKB	CVE-2026-6860	6 May 202609:55	–	attackerkb
Chainguard	CVE-2026-6860 vulnerabilities	10 May 202601:18	–	cgr
Circl	CVE-2026-6860	9 May 202605:10	–	circl
CNNVD	Eclipse Vert.x 安全漏洞	6 May 202600:00	–	cnnvd
CVE	CVE-2026-6860	6 May 202609:55	–	cve
Cvelist	CVE-2026-6860	6 May 202609:55	–	cvelist
EUVD	EUVD-2026-27655	6 May 202609:55	–	euvd
NVD	CVE-2026-6860	6 May 202610:16	–	nvd

Vulners

Node

io.vertx vertx-coreRange5.0.0–5.0.11maven

io.vertx vertx-coreRange4.5.0–4.5.26maven

io.vertx vertx-coreRange4.4.0–4.4.9maven

io.vertx vertx-coreRange4.3.4–4.3.8maven

Source	Link
github	www.github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-6860
github	www.github.com/eclipse-vertx/vert.x/pull/6102
gitlab	www.gitlab.eclipse.org/security/vulnerability-reports/-/issues/381
github	www.github.com/vert-x3/wiki/wiki/4.5.27-Release-Notes
vertx	www.vertx.io/blog/eclipse-vert-x-4-5-27
vertx	www.vertx.io/blog/eclipse-vert-x-5-0-12
github	www.github.com/advisories/GHSA-3g76-f9xq-8vp6

02 Jun 2026 22:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3

CVSS 46.9

EPSS0.00238

SSVC