Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.

Summary IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries. Vulnerability Details CVEID:CVE-2026-50020 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and...

CLEANSTART-2026-VR87787 Security fixes in logstash-fips 9.4.3-r1

Package logstash-fips version 9.4.3-r1 fixes 76 vulnerabilities: CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-50020, CVE-2026-56746...

Security Bulletin: There is a vulnerability in netty-codec-http-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-50020)

Summary There is a vulnerability in netty-codec-http-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-50020 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty (CVE-2026-50010,CVE-2026-50020,CVE-2026-45416 & CVE-2026-44249)

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty. Vulnerability Details CVEID:CVE-2026-50010 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final,...

CVE-2026-50020 vulnerabilities

Vulnerabilities for packages: druid, docker-selenium, logstash, neo4j, spark, sonarqube, trino, strimzi-kafka-operator, infinispan, apache-pulsar, tez, management-api-for-apache-cassandra-5.0, wildfly, opensearch, flyway, keycloak, thingsboard, kserve-modelmesh, celeborn...

CVE-2026-50020

creationtimestamp| type| source ---|---|--- 2026-06-15 22:41:28+00:00| seen| https://gist.github.com/alon710/8b8701e874abebd14b3f406541fda6b0 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3254 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3254...

DEBIAN-CVE-2026-50020

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, before reading the first request-line, HttpObjectDecoder skips every byte for which Character.isISOControlb is true 0x00–0x1F and 0x7F as well as all...