A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAX_HEADER_TABLE_SIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimately resulting in a Denial of Service (DoS).

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Io.netty
  • Netty-codec-http2
Redhat
  • Amq Broker
  • Amq Broker 7
  • Apicurio Registry
  • Build Keycloak
  • Build Of Apache Camel For Quarkus
  • Build Of Apache Camel For Spring Boot
  • Build Of Apicurio Registry
  • Build Of Debezium 3
  • Build Of Keycloak
  • Build Of Quarkus
  • Camel Quarkus
  • Camel Spring Boot
  • Data Grid 8
  • Debezium
  • Jboss Data Grid
  • Jboss Enterprise Application Platform
  • Jboss Fuse
  • Jbosseapxp
  • Quarkus
  • Quay 3
  • Red Hat Single Sign On
  • Single Sign-on

No data.

No data.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:69440 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:69470 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:83612 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-93492 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2536895 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-93492 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-93492 cve-icon
History

Fri, 16 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat jbosseapxp
CPEs cpe:/a:redhat:jbosseapxp
Vendors & Products Redhat jbosseapxp

Thu, 15 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:debezium:3 cpe:/a:redhat:debezium:3.6
References

Tue, 13 Oct 2026 07:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat quarkus
CPEs cpe:/a:redhat:quarkus:3.27::el8
cpe:/a:redhat:quarkus:3.33::el8
Vendors & Products Redhat quarkus

Tue, 22 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
References

Mon, 21 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
First Time appeared Io.netty
Io.netty netty-codec-http2
Redhat amq Broker 7
Redhat build Of Apache Camel For Quarkus
Redhat build Of Apache Camel For Spring Boot
Redhat build Of Apicurio Registry
Redhat build Of Debezium 3
Redhat build Of Keycloak
Redhat build Of Quarkus
Redhat data Grid 8
Redhat quay 3
Redhat single Sign-on
Vendors & Products Io.netty
Io.netty netty-codec-http2
Redhat amq Broker 7
Redhat build Of Apache Camel For Quarkus
Redhat build Of Apache Camel For Spring Boot
Redhat build Of Apicurio Registry
Redhat build Of Debezium 3
Redhat build Of Keycloak
Redhat build Of Quarkus
Redhat data Grid 8
Redhat quay 3
Redhat single Sign-on

Mon, 21 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:quarkus:3
Vendors & Products Redhat quarkus
References

Sun, 20 Sep 2026 03:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 19 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 18 Sep 2026 13:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAX_HEADER_TABLE_SIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimately resulting in a Denial of Service (DoS).
Title Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size
First Time appeared Redhat
Redhat amq Broker
Redhat apicurio Registry
Redhat build Keycloak
Redhat camel Quarkus
Redhat camel Spring Boot
Redhat debezium
Redhat jboss Data Grid
Redhat jboss Enterprise Application Platform
Redhat jboss Fuse
Redhat quarkus
Redhat red Hat Single Sign On
Weaknesses CWE-1035
CPEs cpe:/a:redhat:amq_broker:7
cpe:/a:redhat:apicurio_registry:3
cpe:/a:redhat:build_keycloak:
cpe:/a:redhat:camel_quarkus:3
cpe:/a:redhat:camel_spring_boot:4
cpe:/a:redhat:debezium:3
cpe:/a:redhat:jboss_data_grid:8
cpe:/a:redhat:jboss_enterprise_application_platform:7
cpe:/a:redhat:jboss_enterprise_application_platform:8
cpe:/a:redhat:jboss_fuse:7
cpe:/a:redhat:quarkus:3
cpe:/a:redhat:red_hat_single_sign_on:7
Vendors & Products Redhat
Redhat amq Broker
Redhat apicurio Registry
Redhat build Keycloak
Redhat camel Quarkus
Redhat camel Spring Boot
Redhat debezium
Redhat jboss Data Grid
Redhat jboss Enterprise Application Platform
Redhat jboss Fuse
Redhat quarkus
Redhat red Hat Single Sign On
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2026-09-18T12:49:03.688Z

Updated: 2026-10-16T17:35:07.388Z

Reserved: 2026-09-18T07:15:03.252Z

Link: CVE-2026-93492

cve-icon Vulnrichment

Updated: 2026-09-18T14:40:20.723Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-18T13:18:38.877

Modified: 2026-10-16T18:19:44.293

Link: CVE-2026-93492

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-10T00:41:18Z

Links: CVE-2026-93492 - Bugzilla