{"vulnerability": "cve-2026-5990", "sightings": [{"uuid": "d79f3dcd-3e16-4863-8bac-1c15da15e82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5990", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj45s7mctb2i", "content": "", "creation_timestamp": "2026-04-10T01:20:31.590325Z"}, {"uuid": "94e0f1e9-e05d-4eba-a5c0-f334f2180883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5990", "type": "published-proof-of-concept", "source": "Telegram/BbEIcdIV40x7T9MMril6ukSAKgSf88SJJjfMMNuw6irzUIE", "content": "", "creation_timestamp": "2026-04-10T01:19:22.000000Z"}, {"uuid": "a8a99fb7-8619-48cc-9e7f-b4d20120e49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5990", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkoeozo2yc2s", "content": "\ud83d\udccc CVE-2026-5990 - A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function fromSafeEmailFilter of the file /goform/SafeEmail... https://www.cyberhub.blog/cves/CVE-2026-5990", "creation_timestamp": "2026-04-30T00:37:08.633364Z"}, {"uuid": "08731da4-f7bc-4214-bb4a-a7ff39a19378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59900", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.992756Z"}, {"uuid": "a1586869-7051-4574-98da-70bb7391d479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59901", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:14.055083Z"}, {"uuid": "aae7a11e-7425-41f1-8601-969faf4cfca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59900", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:45:17.771234Z"}, {"uuid": "d024c274-caa3-43c0-936c-e5e63f523053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59902", "type": "seen", "source": "https://gist.github.com/alon710/3510ab254b4d34227fef740b05b4af4e", "content": "# CVE-2026-59902: CVE-2026-59902: Memory Exhaustion in Netty SctpMessageCompletionHandler\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59902\n\n## Summary\nAn uncontrolled resource consumption vulnerability in Netty's SctpMessageCompletionHandler allows unauthenticated remote attackers to cause a Denial of Service. By transmitting a series of large, fragmented Stream Control Transmission Protocol (SCTP) messages, an attacker can exhaust the Java Virtual Machine heap or direct memory. This occurs because the handler fails to enforce limits on the cumulative byte size of buffered, incomplete SCTP fragments.\n\n## TL;DR\nUnauthenticated remote attackers can crash Netty-based SCTP servers by exhausting JVM memory with unrestricted fragment accumulation.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS Severity**: 7.5 (High)\n- **Exploit Status**: none\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- Netty Transport SCTP (io.netty:netty-transport-sctp)\n- **netty-transport-sctp**: < 4.1.137.Final (Fixed in: `4.1.137.Final`)\n- **netty-transport-sctp**: >= 4.2.0.Final, < 4.2.17.Final (Fixed in: `4.2.17.Final`)\n\n## Mitigation\n\n- Upgrade the Netty transport library dependencies to patched versions (4.1.137.Final / 4.2.17.Final).\n- Apply network-layer firewall filters to restrict SCTP traffic to authenticated peer endpoints.\n- Implement rate-limiting controls to restrict concurrent SCTP associations per source IP.\n\n**Remediation Steps:**\n1. Open the project's dependency configuration file (e.g., pom.xml or build.gradle).\n2. Locate the dependencies associated with the group 'io.netty' and artifact 'netty-transport-sctp'.\n3. Update the version string to '4.1.137.Final' (for 4.1.x projects) or '4.2.17.Final' (for 4.2.x projects).\n4. Rebuild the application and run unit tests to confirm dependency resolution.\n5. Deploy the updated application binary to production environments and monitor JVM memory metrics.\n\n## References\n\n- [GitHub Security Advisory: Memory Exhaustion in SctpMessageCompletionHandler](https://github.com/netty/netty/security/advisories/GHSA-2qj4-mmr9-4v2f)\n- [Fix Commit 1b5abc64](https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7)\n- [Netty Pull Request 17213](https://github.com/netty/netty/pull/17213)\n- [Netty Pull Request 17217](https://github.com/netty/netty/pull/17217)\n- [Netty Release v4.1.137.Final](https://github.com/netty/netty/releases/tag/netty-4.1.137.Final)\n- [Netty Release v4.2.17.Final](https://github.com/netty/netty/releases/tag/netty-4.2.17.Final)\n- [CVE-2026-59902 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-59902)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59902) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T18:31:27.666331Z"}, {"uuid": "22488373-47e7-4f15-9d49-4f13033a044e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59901", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:21.081935Z"}, {"uuid": "8f9a95cf-dd94-4b85-8e84-791e85d492c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59903", "type": "seen", "source": "https://gist.github.com/alon710/53c9694ceb5875fbe39960b018952b7c", "content": "# CVE-2026-59903: CVE-2026-59903: Cache Poisoning and Information Disclosure via CorsHandler Vary Header Overwrite\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59903\n\n## Summary\nA technical analysis of CVE-2026-59903 in Netty's HTTP CORS handler, where the CorsHandler overwrites existing application Vary headers with Origin, leading to unauthorized caching of sensitive information.\n\n## TL;DR\nNetty's CorsHandler replaces application-defined Vary headers with Origin, allowing downstream caching proxies to cache private user sessions and expose them to unauthorized clients.\n\n## Technical Details\n\n- **CWE ID**: CWE-524\n- **Attack Vector**: Network\n- **Attack Complexity**: High\n- **CVSS Score**: 6.5\n- **Exploit Status**: None\n- **Impact**: Information Disclosure / Confidentiality (High)\n\n## Affected Systems\n\n- Netty Http Codec\n- Applications utilizing io.netty:netty-codec-http and CorsHandler\n- **netty-codec-http**: < 4.1.137.Final (Fixed in: `4.1.137.Final`)\n- **netty-codec-http**: >= 4.2.0.Final, < 4.2.17.Final (Fixed in: `4.2.17.Final`)\n\n## Mitigation\n\n- Upgrade Netty dependencies to safe versions.\n- Deploy virtual patching at CDN or reverse proxy level.\n- Implement a custom downstream Netty handler to restore critical Vary values.\n\n**Remediation Steps:**\n1. Identify any usage of CorsHandler in the Netty channel pipeline.\n2. Update maven or gradle build files to pull io.netty:netty-codec-http version 4.1.137.Final or 4.2.17.Final.\n3. Verify that outbound responses retain original Vary values such as Authorization or Cookie alongside Origin.\n\n## References\n\n- [GitHub Security Advisory GHSA-8c42-7qj2-3j46](https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46)\n- [Netty Pull Request 17213](https://github.com/netty/netty/pull/17213)\n- [Netty Pull Request 17217](https://github.com/netty/netty/pull/17217)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59903) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T19:31:21.730516Z"}]}