Search: CVE-2026-93562

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-93562Red Hat build of Keycloak 26.4 · OWASP Top Ten 2017 Category A9 – Using Components with Known Vulnerabilities Medium6.5EPSS 0.4%2026-09-18CVE Database V5CVE-2026-93562 A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls or accessing unauthorized resources. EPSS 0.4%Vulnerability CWE-1035	CVE Database V5	2026-09-18

Page 1 of 1 · 1 duplicate CVE record merged