Threats tagged 'ghsa-6f4p-h3xm-c8rc'

CVE-2026-93565 is a high-severity vulnerability in the Netty RtspDecoder component used by Red Hat Build of Apache Camel 3.33.3.SP2. The flaw involves improper handling in the RtspMethods.valueOf() function, which incorrectly strips trailing control bytes from RTSP method tokens. This can be exploited remotely by sending crafted RTSP requests to bypass method-based access controls and to smuggle malicious requests through Netty-based RTSP proxies, making them appear legitimate to backend systems.