CVE-2026-56820

Netty (versions 4.2.0.Final–4.2.15.Final and before 4.1.135.Final) contains an OCSP validation flaw in OcspClient: it does not verify that the CertificateID in the OCSP response matches the requested CertificateID, allowing a replay of a GOOD status issued by the same CA to bypass revocation chec...