THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-48043 (MEDIUM 5.3) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingDecompressorFrameListener` class orchestrates HTTP/2 decompression by embedding a per-stream `EmbeddedCh

[NVD] CVE-2026-48043 (MEDIUM 5.3) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingDecompressorFrameListener` class orchestrates HTTP/2 decompression by embedding a per-stream `EmbeddedCh

lownvdPublished 2026-06-12

CVE-2026-48043 CVSS: 5.3 MEDIUM Published: 2026-06-12T16:16:30.587

Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingDecompressorFrameListener` class orchestrates HTTP/2 decompression by embedding a per-stream `EmbeddedChannel` that runs the appropriate decompression codec

Indicators of compromise

CVE-2026-48043cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-48043