← العودة للجدول
CVE-2026-47691
CVE-2026-47691 — Netty is a network application framework for development of protocol servers and
📅 2026-06-12
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 8.7

📋 الوصف الكامل

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an authoritative name server for a subdomain can poison the cache for parent domains (like `.co.uk`). In `io.netty.reso

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-47691

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.1.135

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←