VULNERABILITY INTELLIGENCE

CVE-2026-47844

CVSS score5.3 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-08-26
Last modified2026-09-04
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references