VulnSocial

CVE-2026-45673General(netty / netty)

LOWCVSS 6.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP source port. This combination reduces the entropy of DNS queries, enabling DNS Cache Poisoning (Kaminsky attack). Versions 4.1.135.Final and 4.2.15.Final patch the issue.

netty CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-330CWE-340

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • netty

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-12); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
netty
Products
netty

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-12: 1Mentions · 2026-06-20: 1Technical Details · 2026-06-12: 1Technical Details · 2026-06-20: 106-1206-20
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-121
General1
2026-06-201
Disclosure1
Full discourse2 posts
  • ThreatAft@ThreatAft
    Disclosure

    🚨 CRITICAL: Netty DNS Resolver Flaws — Cache Poisoning Vulnerabilities CVE-2026-45673 (CVSS 6.8), CVE-2026-45674 (CVSS 8.7), CVE-2026-47691 (CVSS 8.7) 🔗 https://threataft.com/articles/netty-dns-resolver-cache-poisoning-vulnerabilities #CyberSecurity #ThreatIntel #infosec #Netty #Java

    Post summary

    The post announces three critical Netty DNS resolver cache poisoning vulnerabilities with CVSS scores, highlighting the new CVEs and directing readers to an external article for more information.

    0000083
    31 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-45673 DNS Cache Poisoning in Netty Before Versions http://4.1.135.Final and http://4.2.15.Final https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45673

    Post summary

    The text briefly lists CVE-2026-45673, stating it is a DNS cache poisoning issue in Netty prior to specific versions, with no PoC, exploit, patch, or active exploitation details provided.

    0000037
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appnettynetty---

Explore more

Back to dashboardnetty CVEsnetty vulnerabilities