CVE-2026-93566 · Brief

CVEs like CVE-2026-93566

The records whose text reads closest to CVE-2026-93566, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2025-580560.767
   Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

2. CVE-2021-214090.758
   Possible request smuggling in HTTP/2 due missing validation of content-length

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2026-935740.829
   Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing

   Same vendor or product family, Red.

4. CVE-2021-212950.730
   Possible request smuggling in HTTP/2 due missing validation

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

5. CVE-2025-677350.739
   Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2021-437970.774
   HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

7. CVE-2026-935620.833
   Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

   Same weakness class, CWE-1035; same vendor or product family, Red.

8. CVE-2026-338700.799
   Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2019-168690.778
   Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding :…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

10. CVE-2026-935730.792
    Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request…

    Same vendor or product family, Red.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.