CVE-2026-93573 is a medium severity vulnerability in Netty where splitting Transfer-Encoding fields bypasses final-chunked validation, enabling HTTP request smuggling attacks. This flaw allows an attacker to manipulate HTTP requests by exploiting improper validation of chunked transfer encoding headers. The vulnerability has a CVSS score of 6.5 and is classified under CWE-444 (Improper Resource Shutdown or Release).