CVE WATCH / VULNERABILITY DETAIL

CVE-2026-102465

UNKNOWNCVSS 0NVD feed

Published 15 October 2026 · tracked since 16 October 2026

Description

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middl

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools