https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T16:42:01.034357+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116540 CVE-2026-116540 — netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback 2026-10-27T16:42:01.035267+00:00

Affected: netty-tcnative

netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.