CVE-2026-47845

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2026-47845	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:broadcom:reactor_netty::::::::
	cpe:2.3:a:broadcom:reactor_netty::::::::
	cpe:2.3:a:broadcom:reactor_netty::::::::

History

No history.

Information

Published : 2026-08-27 01:17

Updated : 2026-09-04 19:06

NVD link : CVE-2026-47845

Mitre link : CVE-2026-47845

CVE.ORG link : CVE-2026-47845

JSON object : View

Products Affected

broadcom

reactor_netty

CWE

CWE-290

Authentication Bypass by Spoofing

{"id": "CVE-2026-47845", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47845", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-27T14:02:16.353921Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Spring", "product": "Reactor Netty", "versions": [{"status": "affected", "version": "1.3.0", "versionType": "custom", "lessThanOrEqual": "1.3.6"}, {"status": "affected", "version": "1.1.0", "versionType": "custom", "lessThanOrEqual": "1.2.18"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0.52"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-27T01:17:31.827", "references": [{"url": "https://spring.io/security/cve-2026-47845", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-290"}]}], "descriptions": [{"lang": "en", "value": "In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol.\nReactor Netty 1.3.0 - 1.3.6\nReactor Netty 1.1.0 - 1.2.18\nReactor Netty 1.0.52 and earlier"}], "lastModified": "2026-09-04T19:06:58.447", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:reactor_netty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE1D5A2A-4549-41CA-A119-9E376FFFEA5D", "versionEndExcluding": "1.0.53"}, {"criteria": "cpe:2.3:a:broadcom:reactor_netty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35B4D929-53C7-4B17-83B2-79976CF8CC26", "versionEndExcluding": "1.2.19", "versionStartIncluding": "1.1.0"}, {"criteria": "cpe:2.3:a:broadcom:reactor_netty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "393A111C-DE4E-4182-87E3-66854B053681", "versionEndExcluding": "1.3.6.1", "versionStartIncluding": "1.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}