Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path attacker replay a stale GOOD response to bypass revocation of a since-revoked certificate. Exploitation can lead to certificate revocation bypass via replay of an expired OCSP response. Any application using OcspServerCertificateValidator is affected; a revoked certificate can be accepted. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-56821 Netty is an asynchronous, event-driven network application framework. Prior to versions http://4.1.136.Final and http://4.2.16.Final, the OcspServerCertificateValidator flags an ou… https://www.cve.org/CVERecord?id=CVE-2026-56821
Post summary
The text merely references a CVE‑2026‑56821 for Netty with affected version details, but offers no explicit PoC, exploit, patch, or detailed vulnerability information.
csirt_it: ‼ #Netty: disponibili #PoC per lo sfruttamento delle CVE-2026-56822 e CVE-2026-56821 Rischio: 🔴 Tipologia: 🔸 Security Feature Bypass 🔗 https://www.acn.gov.it/portale/w/netty-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-56822-e-cve-2026-56821 ⚠ Importante mantenere aggiornati i sistemi https://t.co/KinTpVuDUm
Post summary
The post announces publicly available PoCs for Netty CVE-2026-56822 and CVE-2026-56821, classifying them as Security Feature Bypass, and urges users to keep systems updated.
🚨*CVE* CVE-2026-56821 Netty is an asynchronous, event-driven network application framework. Prior to versions http://4.1.136.Final and http://4.2.16.Final, the OcspServerCertificateValidator flags an ou… https://www.cve.org/CVERecord?id=CVE-2026-56821 ----- Traducció… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑56821, mentioning affected Netty versions and a component, but does not provide a PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | netty | netty | - | - | - |