CVE-2026-45674

HIGH

8.7

CVSS Severity Score

EPSS Score0.1100%

EPSS Percentile30.43th

Published2026年6月12日

Last Modified2026年6月12日

Vulnerability Description

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://github.com/netty/netty/releases/tag/netty-4.1.135.Final

🔗 https://github.com/netty/netty/releases/tag/netty-4.2.15.Final

🔗 https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

関連する脆弱性情報