CVE-2026-93561Published
Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling
cve-program · CVE-2026-93561
Publishednetty-codec-memcache
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "netty-codec-memcache",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
]
}netty-codec-memcache
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Fuse 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "netty-codec-memcache",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
]
}jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}jboss-eap-7/eap74-els-openjdk8-openshift-rhel8
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}netty-codec-memcache
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "netty-codec-memcache",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}netty-codec-memcache
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "netty-codec-memcache",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7"
]
}Original source record · Cite this exact observation · Complete original publisher JSON