AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-93493

A flaw was found in Netty's `netty-handler-ssl-ocsp` component

Red Hat

CVE-2026-93493 · Published Sep 18, 2026

Medium5.9
No fix yet
Red Hat advisory

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol (OCSP) response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to applications proceeding with an unvalidated certificate. This can result in a bypass of security controls where certificate validation is expected.

Affected versions

PackageAffectedFixed in
Red Hat build of Apache Camel for Spring Boot 4
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-299

More Red Hat advisories

All Red Hat