Veille CVE

Vendredi 25 septembre 2026

6 CVE

Critique 0 Élevée 5 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Spring Boot » ✕
  1. CVE-2026-93576 7.5 Élevée

    Red Hat build of Apache Camel for Spring Boot 4 · Red Hat Fuse 7 · Red Hat JBoss Enterprise Application Platform 7 · Red Hat Single Sign-On 7

    A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote attacker, if an application routes untrusted input into this field, can embed CR/LF characters to inject arbitrary SMTP commands. This can lead to SMTP command smuggling, allowing for unauthorized email relay or spoofing of sender/recipient addresses. While the impact is significant, the real-world exploitability is considered lower as applications typically do not place user-controlled data in the command-name field.

  2. CVE-2026-93575 7.5 Élevée

    Red Hat AMQ Broker 7 · Red Hat build of Apache Camel for Spring Boot 4 · Red Hat Fuse 7 · Red Hat JBoss Enterprise Application Platform 7

    A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits. This leads to excessive memory and CPU consumption, resulting in a denial of service (DoS) due to an OutOfMemoryError.

  3. CVE-2026-93572 7.5 Élevée

    Red Hat build of Apache Camel for Spring Boot 4 · Red Hat Fuse 7 · Red Hat JBoss Enterprise Application Platform 7 · Red Hat Single Sign-On 7

    A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis (RESP) array headers. This can cause the `RedisArrayAggregator` to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustion and a Denial of Service (DoS) for applications using `RedisDecoder` with `RedisArrayAggregator` on untrusted traffic.

  4. CVE-2026-93563 7.5 Élevée

    Red Hat build of Apache Camel for Spring Boot 4 · Red Hat Fuse 7 · Red Hat JBoss Enterprise Application Platform 7 · Red Hat Single Sign-On 7

    A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vulnerability leads to unbounded memory accumulation within the client's Java Virtual Machine (JVM) heap, causing an `OutOfMemoryError` and a denial of service (DoS) due to a process crash.

  5. CVE-2026-93561 6.5 Moyenne

    Red Hat build of Apache Camel for Spring Boot 4 · Red Hat Fuse 7 · Red Hat JBoss Enterprise Application Platform 7 · Red Hat Single Sign-On 7

    A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted response. This can lead to frame desynchronization and response smuggling, where one client's data may be inadvertently exposed to another client's response stream in proxy or cache environments.

  6. CVE-2026-93494 7.5 Élevée

    Red Hat build of Apache Camel for Spring Boot 4 · Red Hat Fuse 7 · Red Hat JBoss Enterprise Application Platform 7 · Red Hat Single Sign-On 7

    A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating null byte. This causes the decoder to allocate a ByteBuf (a buffer for bytes) that is never released, leading to a permanent memory leak. Over time, this uncontrolled memory consumption can result in a Denial of Service (DoS) for the application using the affected STOMP codec.