THREAT OPS › Threat News › [NVD] CVE-2026-44890 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending crafted Redis payloads across multiple connections without `\r\n`. This exhausts t
[NVD] CVE-2026-44890 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending crafted Redis payloads across multiple connections without `\r\n`. This exhausts t
CVE-2026-44890 CVSS: 7.5 HIGH Published: 2026-06-11T22:16:56.997
Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending crafted Redis payloads across multiple connections without `\r\n`. This exhausts the server's direct memory pool (OutOfDirectMemoryError
Indicators of compromise
- CVE-2026-44890cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44890