{"vulnerability": "cve-2026-5682", "sightings": [{"uuid": "bde24e95-75ed-49a7-b018-681701d614fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56821", "type": "seen", "source": "https://www.acn.gov.it/portale/w/netty-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-56822-e-cve-2026-56821", "content": "Disponibili Proof of Concept (PoC) per le vulnerabilit\u00e0 CVE-2026-56822 e CVE-2026-56821 presenti nel componente io.netty:netty-handler-ssl-ocsp del framework open source Netty, ampiamente utilizzato per lo sviluppo di applicazioni di rete in ambiente Java. Tali vulnerabilit\u00e0 - gi\u00e0 sanate dal produttore - potrebbero essere sfruttate, in presenza di determinate condizioni, al fine di eludere i controlli di validazione dei certificati digitali e compromettere la sicurezza delle comunicazioni TLS.", "creation_timestamp": "2026-07-30T01:00:44.720501Z"}, {"uuid": "2b583286-5dcb-4ccf-8f77-5602985195b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56822", "type": "seen", "source": "https://www.acn.gov.it/portale/w/netty-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-56822-e-cve-2026-56821", "content": "Disponibili Proof of Concept (PoC) per le vulnerabilit\u00e0 CVE-2026-56822 e CVE-2026-56821 presenti nel componente io.netty:netty-handler-ssl-ocsp del framework open source Netty, ampiamente utilizzato per lo sviluppo di applicazioni di rete in ambiente Java. Tali vulnerabilit\u00e0 - gi\u00e0 sanate dal produttore - potrebbero essere sfruttate, in presenza di determinate condizioni, al fine di eludere i controlli di validazione dei certificati digitali e compromettere la sicurezza delle comunicazioni TLS.", "creation_timestamp": "2026-07-30T01:00:44.631641Z"}, {"uuid": "faee5d1f-591a-434a-b09e-7235ee8e8b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7ddtmqmx2j", "content": "CVE-2026-56820 - Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks\nCVE ID : CVE-2026-56820\n \n Published : July 21, 2026, 11:17 p.m. | 2\u00a0hours, 27\u00a0minutes ago\n \n Description : Netty is a network application framework for development of protocol serv...", "creation_timestamp": "2026-07-22T02:59:23.955961Z"}, {"uuid": "cb397b3d-1830-4d13-84ab-19c09de96b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56822", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty/security/advisories/GHSA-wc96-39fc-566f", "content": "", "creation_timestamp": "2026-07-22T22:35:10.540308Z"}, {"uuid": "3f49754a-6453-4994-bb8f-b7d533867084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56821", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty/security/advisories/GHSA-g7hg-vrcf-mvmr", "content": "", "creation_timestamp": "2026-07-22T22:35:12.909806Z"}, {"uuid": "7ca1c712-576d-4988-9c1a-48368310802e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56820", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty/security/advisories/GHSA-272m-gcwp-mpwg", "content": "", "creation_timestamp": "2026-07-22T22:35:15.243692Z"}, {"uuid": "563aeac3-d204-461e-aee8-5098db52d08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwjehar622", "content": "CVE-2026-56821 - Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator\nCVE ID : CVE-2026-56821\n \n Published : July 29, 2026, 12:16 a.m. | 2\u00a0hours, 24\u00a0minutes ago\n \n Description : Netty is an asynchronous, event-driven network application framework. Prior...", "creation_timestamp": "2026-07-29T02:57:45.776423Z"}, {"uuid": "5139fc47-809c-4cb4-9864-e573991adb8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvzcxpus2j", "content": "CVE-2026-56822 - Netty: TOCTOU in OcspServerCertificateValidator\nCVE ID : CVE-2026-56822\n \n Published : July 29, 2026, 12:16 a.m. | 2\u00a0hours, 24\u00a0minutes ago\n \n Description : Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final an...", "creation_timestamp": "2026-07-29T02:48:47.429003Z"}, {"uuid": "3eb4e59a-3d48-4033-8107-989b4f1a1506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56822", "type": "seen", "source": "https://www.acn.gov.it/portale/w/netty-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-56822-e-cve-2026-56821", "content": "", "creation_timestamp": "2026-07-29T12:15:10.916803Z"}, {"uuid": "160f6aa7-667d-4525-ad63-9e246bc3231d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56821", "type": "seen", "source": "https://www.acn.gov.it/portale/w/netty-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-56822-e-cve-2026-56821", "content": "", "creation_timestamp": "2026-07-29T12:15:13.311817Z"}]}