Search: CVE-2026-93579

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.9%	CVE-2026-93579Red Hat build of Apache Camel 4 for Quarkus 3 · OWASP Top Ten 2017 Category A9 – Using Components with Known Vulnerabilities Medium6.5EPSS 0.9%2026-09-18CVE Database V5CVE-2026-93579 A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary, they can be exploited for request smuggling, header injection, or response splitting. This could lead to unauthorized access, data manipulation, or other security bypasses. EPSS 0.9%Vulnerability CWE-1035 #ghsa-6w3j-2wqp-7r38	CVE Database V5	2026-09-18

Page 1 of 1 · 2 duplicate CVE records merged