VYPR
← All advisories
High severity8.1NVD Advisory· Published Jun 11, 2026· Updated Jun 15, 2026

CVE-2026-44249

CVE-2026-44249

Description

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
io.netty:netty-handlerMaven
>= 4.2.0.Final, < 4.2.15.Final4.2.15.Final
io.netty:netty-handlerMaven
< 4.1.135.Final4.1.135.Final

Affected products

268

Patches

Vulnerability mechanics

References

5

News mentions

3