CVE-2026-116542 | Netty netty-tcnative/netty-tcnative-boringssl-static up to 2.0.83.Final SNI Hostname NewStringUTF certificate validation

October 26, 2026 Yanac

A vulnerability was found in Netty netty-tcnative and netty-tcnative-boringssl-static up to 2.0.83.Final. It has been rated as problematic. Affected by this vulnerability is the function NewStringUTF of the component SNI Hostname. The manipulation leads to improper certificate validation.

This vulnerability is listed as CVE-2026-116542. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More