P5 Verified
Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass
CVE-2026-100665. EPSS 0.00291 (percentile 0.19642), scored 2026-10-03. Fixed version: 2521f494432e27415a567d3a81a9eb907abf20b3. Fixed version: 09e72c4fd8007277121ed48db63a124b112b96fe. Fixed version: 994e887ed9.
- CVE / CWE
- CVE-2026-100665 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.1
- CVSS
- Unavailable · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N · osv
- EPSS
- 0.00291 · percentile 0.19642 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: 2521f494432e27415a567d3a81a9eb907abf20b3
- Product unavailable · Fixed version: 09e72c4fd8007277121ed48db63a124b112b96fe
- Product unavailable · Fixed version: 994e887ed9
Provenance
- OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-100665.html