Improper Certificate Validation

🗓️ 16 Jun 2026 18:57:29Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 16 Views

Netty vulnerability: improper wrapping of X509TrustManager bypasses hostname verification, MITM.

Reporter	Title	Published	Views	Family All 186
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	2 Jul 202616:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-handler-4.1.133.Final.jar	30 Jun 202611:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to Improper Verification of Cryptographic Signature.	22 Jul 202607:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 1 of 2)	7 Jul 202607:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	25 Jun 202617:40	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty-handler-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-50010)	3 Aug 202606:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty (CVE-2026-50010,CVE-2026-50020,CVE-2026-45416 & CVE-2026-44249)	10 Jul 202605:11	–	ibm
Atlassian	Improper Verification of Cryptographic Signature at netty-handler dependency in Bamboo Data Center	24 Jun 202619:30	–	atlassian
BDU FSTEC	The vulnerability of the SimpleTrustManagerFactory component in the TSL client framework for network application development, servers, and Netty protocol clients allows a attacker to carry out a type of “man-in-the-middle” attack.	19 Jun 202600:00	–	bdu_fstec
Chainguard	CVE-2026-50010 vulnerabilities	16 Jun 202620:22	–	cgr

Vulners

Node

netty-handler netty-handlerRange4.0.0.Alpha1–4.1.134.Finaljava

netty-handler netty-handlerRange4.2.0.Alpha1–4.2.14.Finaljava

netty-handler netty-handlerRange4.2.0.Final–4.2.14.Finaljava

netty-handler netty-handlerRange3.9.2–4.1.134.Finaljava

Source	Link
github	www.github.com/netty/netty/releases/tag/netty-4.2.15.Final
github	www.github.com/netty/netty/releases/tag/netty-4.1.135.Final
github	www.github.com/netty/netty/commit/09e72c4fd8007277121ed48db63a124b112b96fe
access	www.access.redhat.com/errata/RHSA-2026:34608
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2026-50010
access	www.access.redhat.com/errata/RHSA-2026:28573
access	www.access.redhat.com/errata/RHSA-2026:48151
access	www.access.redhat.com/errata/RHSA-2026:26018

01 Aug 2026 17:02Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.17.5

EPSS0.00279

SSVC