VULNERABILITY INTELLIGENCE

CVE-2026-47845

CVSS score5.3 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-08-27
Last modified2026-09-04
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-290

Primary references