CVE-2026-45416High· 7.5▾ Twilight

Netty is a network application framework for development of protocol servers and clients

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello do…

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.1 · exploitation 0

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2026-45416 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.