CVE-2026-50010

🗓️ 12 Jun 2026 16:16:00Reported by ubuntu.comType

Netty trust manager wraps a plain trust manager, skipping hostname verification; fixed in versions 4.1.135.Final and 4.2.15.Final.

Reporter	Title	Published	Views	Family All 204
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	2 Jul 202616:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-handler-4.1.133.Final.jar	30 Jun 202611:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to Improper Verification of Cryptographic Signature.	22 Jul 202607:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 1 of 2)	7 Jul 202607:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	25 Jun 202617:40	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance	10 Aug 202612:22	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty-handler-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-50010)	3 Aug 202606:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty (CVE-2026-50010,CVE-2026-50020,CVE-2026-45416 & CVE-2026-44249)	10 Jul 202605:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Aug 202614:48	–	ibm
Atlassian	Improper Verification of Cryptographic Signature at netty-handler dependency in Bamboo Data Center	24 Jun 202619:30	–	atlassian

OS	OS Version	Architecture	Package	Filename
Ubuntu	18.04	all	netty	netty_0_all.deb
Ubuntu	20.04	all	netty	netty_0_all.deb
Ubuntu	22.04	all	netty	netty_0_all.deb
Ubuntu	24.04	all	netty	netty_0_all.deb
Ubuntu	26.04	all	netty	netty_0_all.deb
Ubuntu	14.04	all	netty	netty_0_all.deb

Source	Link
cve	www.cve.org/CVERecord
github	www.github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9
github	www.github.com/netty/netty/releases/tag/netty-4.1.135.Final
github	www.github.com/netty/netty/releases/tag/netty-4.2.15.Final

19 Jun 2026 08:57Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00456

SSVC