VulnSocial

CVE-2026-93575Patch

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits. This leads to excessive memory and CPU consumption, resulting in a denial of service (DoS) due to an OutOfMemoryError.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1035

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-20: 1Patch / Workaround · 2026-09-20: 1Technical Details · 2026-09-20: 109-20
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Patch

    #CVE-2026-93575: CVSS 7.5 HIGH Netty MQTT decoder bypass allows unauthenticated remote attackers to trigger OutOfMemoryError via malformed Properties Length. Incomplete fix for CVE-2026-44248. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/yVsVhY7LhL

    Post summary

    The text discloses CVE-2026-93575, provides technical vulnerability details, and explicitly instructs patching due to an incomplete fix for a prior vulnerability.

    0000036
    139 followersView on X

Explore more

Back to dashboard