CVE-2026-47848
EUVD-2026-6668026.08.2026, 20:17
In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| broadcom | reactor_netty | 𝑥 < 1.0.53 |
| broadcom | reactor_netty | 1.1.0 ≤ 𝑥 < 1.2.19 |
| broadcom | reactor_netty | 1.3.0 ≤ 𝑥 < 1.3.6.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration