CVE-2026-89044

A flaw was found in Netty. A remote attacker could exploit improper validation of the Transfer-Encoding header by sending specially crafted HTTP requests. This vulnerability allows for HTTP request smuggling, enabling attackers to bypass security controls and potentially gain unauthorized access ...