CVEvulnerability

CVE-2026-47844

3.7 LOW Published 2026-08-26 Modified 2026-09-04 Official page ↗
Status
Analyzed
Published
2026-08-26
Last modified
2026-09-04
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Affected configurations

• broadcom reactor netty (< 1.0.53) • broadcom reactor netty (>= 1.1.0 < 1.2.19) • broadcom reactor netty (>= 1.3.0 < 1.3.6.1)

References