CVE-2026-116540 | netty netty-tcnative up to 2.0.83.Final Session Ticket Key Rotation ssl_tlsext_ticket_key_cb use after free

October 26, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in netty netty-tcnative up to 2.0.83.Final. Impacted is the function ssl_tlsext_ticket_key_cb of the component Session Ticket Key Rotation. The manipulation leads to use after free.

This vulnerability is uniquely identified as CVE-2026-116540. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More