CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Mend•added 2026/07/29 5:58 p.m.•9 views

CVE-2026-59900

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer "Http2StreamFrameToHttpObjectCodec" and "InboundHttp2ToHttpAdapter" fails to deduplicate or validate "Host" headers when an HTTP/2...

7.2CVSS6.5AI score0.00398EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2026/07/29 12:00 a.m.•9 views

CVE-2026-59900: Inconsistent Interpretation of HTTP Requests

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer Http2StreamFrameToHttpObjectCodec and InboundHttp2ToHttpAdapter fails to deduplicate or validate Host headers when an HTTP/2 client...

6.9CVSS6.5AI score0.00398EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by