CVE-2026-47844

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2026-47844	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:broadcom:reactor_netty::::::::
	cpe:2.3:a:broadcom:reactor_netty::::::::
	cpe:2.3:a:broadcom:reactor_netty::::::::

History

No history.

Information

Published : 2026-08-26 20:17

Updated : 2026-09-04 19:10

NVD link : CVE-2026-47844

Mitre link : CVE-2026-47844

CVE.ORG link : CVE-2026-47844

JSON object : View

Products Affected

broadcom

reactor_netty

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-47844", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47844", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-26T19:32:06.823155Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Spring", "product": "Reactor Netty", "versions": [{"status": "affected", "version": "1.3.0", "versionType": "custom", "lessThanOrEqual": "1.3.6"}, {"status": "affected", "version": "1.1.0", "versionType": "custom", "lessThanOrEqual": "1.2.18"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0.52"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-26T20:17:26.637", "references": [{"url": "https://spring.io/security/cve-2026-47844", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing.\nReactor Netty 1.3.0 - 1.3.6\nReactor Netty 1.1.0 - 1.2.18\nReactor Netty 1.0.52 and earlier"}], "lastModified": "2026-09-04T19:10:33.817", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:reactor_netty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE1D5A2A-4549-41CA-A119-9E376FFFEA5D", "versionEndExcluding": "1.0.53"}, {"criteria": "cpe:2.3:a:broadcom:reactor_netty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35B4D929-53C7-4B17-83B2-79976CF8CC26", "versionEndExcluding": "1.2.19", "versionStartIncluding": "1.1.0"}, {"criteria": "cpe:2.3:a:broadcom:reactor_netty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "393A111C-DE4E-4182-87E3-66854B053681", "versionEndExcluding": "1.3.6.1", "versionStartIncluding": "1.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}