THREAT OPS › Threat News › [NVD] CVE-2026-44250 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending a crafted Redis payload with deeply nested arrays. This forces the server to alloc
[NVD] CVE-2026-44250 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending a crafted Redis payload with deeply nested arrays. This forces the server to alloc
CVE-2026-44250 CVSS: 7.5 HIGH Published: 2026-06-11T22:16:56.857
Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending a crafted Redis payload with deeply nested arrays. This forces the server to allocate a massive number of state objects and collections,
Indicators of compromise
- CVE-2026-44250cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44250