Bundesamt für Sicherheit in der Informationstechnik Dell · Netty: Mehrere Schwachstellen
Affects Bundesamt für Sicherheit in der Informationstechnik DellSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited : upgrade to 5.36.00.16 when convenient.
Data as of 26 Oct 2026, 12:55 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 0.7% chance of exploitation in 30 days – higher than 52% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 5.36.00.16
Exploitation evidence
Disclosed: evidence found.
CVE published 24 Mar 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Bundesamt für Sicherheit in der Informationstechnik Dell to 5.36.00.16.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Dell | Affected
| Fixed in
|
Description
Netty ist ein asynchrones, ereignisgesteuertes Netzwerk-Anwendungs-Framework für die schnelle Entwicklung von wartbaren, hochleistungsfähigen Protokollservern und -clients.
References
- wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0846.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0846 (opens in a new tab)
- github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8 (opens in a new tab)
- github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv (opens in a new tab)
- lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V6FXSMXDC2QFATWVCNOU4EKAIWG25UXN/ (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:8159 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:7109 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:7380 (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-April/025364.html (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:8509 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:10175 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:10184 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:13571 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:14276 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:14272 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:17668 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:18055 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:18054 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:18059 (opens in a new tab)
- keycloak.org/2026/05/keycloak-2662-released (opens in a new tab)