https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 23:00:56 +0000 https://db.gcve.eu/vuln/cve-2026-93568 <p><strong>Affected:</strong> Red Hat Build of Apache Camel 3.33.3.SP2, Red Hat Build of Debezium 3.6, Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.17, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.8, Red Hat build of Quarkus 3.27.5.SP2, Red Hat build of Quarkus 3.33.3.SP2, Red Hat JBoss Enterprise Application Platform 8.1, Red Hat AMQ Broker 7 and 9 more</p> <p>A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty&#39;s HTTP-object conversion path incorrectly processes these requests as regular HTTP/1.1 CONNECT requests, leading to a loss of critical protocol and path information. This misinterpretation can allow attackers to bypass security policies, such as routing or authorization logic, in applications that rely on Netty for HTTP/2 or HTTP/3 communication, resulting in integrity loss.</p> <p><strong>Affected:</strong> Red Hat Build of Apache Camel 3.33.3.SP2, Red Hat Build of Debezium 3.6, Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.17, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.8, Red Hat build of Quarkus 3.27.5.SP2, Red Hat build of Quarkus 3.33.3.SP2, Red Hat JBoss Enterprise Application Platform 8.1, Red Hat AMQ Broker 7 and 9 more</p> <p>A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty&#39;s HTTP-object conversion path incorrectly processes these requests as regular HTTP/1.1 CONNECT requests, leading to a loss of critical protocol and path information. This misinterpretation can allow attackers to bypass security policies, such as routing or authorization logic, in applications that rely on Netty for HTTP/2 or HTTP/3 communication, resulting in integrity loss.</p> https://db.gcve.eu/vuln/cve-2026-93568