7.5
High
CVE-2026-93576 A flaw was found in Netty netty-codec-smtp
Description
A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote attacker, if an application routes untrusted input into this field, can embed CR/LF characters to inject arbitrary SMTP commands. This can lead to SMTP command smuggling, allowing for unauthorized email relay or spoofing of sender/recipient addresses. While the impact is significant, the real-world exploitability is considered lower as applications typically do not place user-controlled data in the command-name field.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat build of Apache Camel for Spring Boot 4 | Versions not published | |
| Red Hat Fuse 7 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7 | Versions not published | |
| Red Hat Single Sign-On 7 | Versions not published |
Other CVEs of Red Hat build of Apache Camel for Spring Boot 4
The 106 CVEs of Red Hat build of Apache Camel for Spring Boot 4 →
CVE-2026-91920
Undertow: undertow: chunkreader message length permits chunk-size overflow
6.5
Medium
CVE-2026-114370
Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal
3.7
Low
CVE-2026-93562
Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
6.5
Medium
CVE-2026-93574
Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing
6.5
Medium