← العودة للجدول
CVE-2026-44894
CVE-2026-44894 — Netty is a network application framework for development of protocol servers and
📅 2026-06-12
🟠 High 🔥 No NVD ICS/OT OT/ICS CVSS 7.5

📋 الوصف الكامل

Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the application does not set one. Prior to version 4.2.15.Final, its writeToken() returns false (server will not send Retry — acceptable), but validateToken() unconditionally `return 0`. In QuicheQuicServerCodec.handlePacket(), a non-negative return from vali

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

ICS/OT

🔗 CVE ID

CVE-2026-44894

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.2.15

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←