CVE-2026-93560

A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integer truncation vulnerability could lead to an infinite decode loop, causing a Denial of Service (DoS) by exhausting memory and CPU resources.

• CWE-1035

• https://access.redhat.com/security/cve/CVE-2026-93560
• https://bugzilla.redhat.com/show_bug.cgi?id=2536939

Published

Sep 18, 2026

Last Modified

Sep 18, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93534A vulnerability was identified in spatie Scotty up to 1.4.2.…6.3
• CVE-2026-9354A vulnerability was detected in NousResearch hermes-agent up…6.5
• CVE-2026-9355A flaw has been found in SourceCodester Hospitals Patient Re…7.3
• CVE-2026-93558A flaw was found in Netty's WebSocketServerExtensionHandler.…7.5
• CVE-2026-93559A vulnerability was identified in Forget-C Jellyfish AI Shor…7.3
• CVE-2026-9356A vulnerability has been found in SourceCodester Hospitals P…7.3
• CVE-2026-93561A flaw was found in io.netty/netty-codec-memcache. The Memca…6.5
• CVE-2026-93562A flaw was found in Netty's HTTP/1 decoder. Incomplete valid…6.5
• CVE-2026-93563A flaw was found in Netty's `SmtpResponseDecoder` component.…7.5
• CVE-2026-93564A flaw was found in Netty. A reference-count leak in the HAP…7.5
• CVE-2026-93565A flaw was found in Netty RtspDecoder. The `RtspMethods.valu…7.5
• CVE-2026-93566A flaw was found in Netty. A remote attacker could exploit t…6.5