GGraceITSCVE Center
ā† Threat Center
10.0
CRITICAL ā€¢ CVSS 3.1

CVE-2026-45674

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Prioritization

NVD CVSS
10.0
Published
Jun 12, 2026 11:16 AM EDT
Modified
Aug 21, 2026 9:18 AM EDT
CISA KEV
No

Red Hat context

No Red Hat-specific cached context is available for this record.

DEFENSIVE REMEDIATION WORKFLOW

Recommended response

  1. Identify affected assets with Qualys, Tanium, software inventory, CMDB or configuration-management data.
  2. Confirm package/application applicability before change execution; CVSS alone does not prove that every host is vulnerable.
  3. Patch, upgrade, rehydrate or apply a vendor-approved mitigation through controlled change. GraceITS can automate eligible waves with Ansible/Tanium.
  4. Rescan after remediation and reconcile remaining exceptions, false positives, unsupported systems and compensating controls.
Ask GraceITS to remediate this CVE NVD record ā†—