THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-48059 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid heade

[NVD] CVE-2026-48059 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid heade

lownvdPublished 2026-06-12

CVE-2026-48059 CVSS: 7.5 HIGH Published: 2026-06-12T16:16:30.720

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid header containing nested `PP2_TYPE_SSL` TLVs (type-length-v

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-48059