CVE record · CVE-2026-93558
Published by the CVE Program (CNA: redhat) at 18 Sept 2026, 14:09 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Build of Apache Camel 3.33.3.SP2 Package name: io.netty/netty-codec-http https://access.redhat.com/downloads/content/package-browser/ |
|
| Red Hat | Red Hat Build of Debezium 3.6 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat build of Quarkus 3.27.5.SP2 Package name: netty-codec-http https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat build of Quarkus 3.33.3.SP2 Package name: netty-codec-http https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat AMQ Broker 7 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat AMQ Clients Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat build of Apache Camel 4 for Quarkus 3 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat build of Apache Camel for Spring Boot 4 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat build of Apicurio Registry 3 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Build of Keycloak Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Data Grid 8 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Fuse 7 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unknown |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 Package name: netty-codec-http https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unknown |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 Package name: netty-codec-http https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: affected |
| Red Hat | Red Hat Single Sign-On 7 Package name: netty-codec-http https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.5 | High | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CNA (redhat) |
