Vulnerabilities CVE-2026-45674

CVE-2026-45674

High

Open

TLP:CLEAR

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 0.25%

16.2th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Confidence: 90%
Published: Jun 12, 2026
Last Modified: Aug 12, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.