CVE WATCH / VULNERABILITY DETAIL
CVE-2026-116540
MEDIUMCVSS 5.9NVD feed
Published 26 October 2026 · tracked since 27 October 2026
Description
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read free
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-72752 MEDIUM 6.5
- CVE-2026-50095 MEDIUM 6.1
- CVE-2026-116398 MEDIUM 6.5
- CVE-2026-116400 MEDIUM 6.5
- CVE-2026-115922 MEDIUM 6.2
- CVE-2026-115923 MEDIUM 6.5
- CVE-2026-115966 MEDIUM 6.5
- CVE-2026-115918 MEDIUM 6.5
- CVE-2026-115919 MEDIUM 6.2
- CVE-2026-115920 MEDIUM 6.2