CVE-2026-116540

5.9 MEDIUMpublic exploit available

Published 2026-10-26 · Updated 2026-10-26

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-416

Public exploit & PoC references

https://github.com/netty/netty-tcnative
https://github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final/openssl-dynamic/src/main/c/sslcontext.c#L1365
https://github.com/netty/netty-tcnative/commit/59662a8b07a9a7623ae1bc472f5751f31c81a118
https://github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.84.Final
https://github.com/netty/netty-tcnative/security/advisories/GHSA-mmc8-vg2v-fvvw

All references

https://github.com/netty/netty-tcnative
https://github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final/openssl-dynamic/src/main/c/sslcontext.c#L1365
https://github.com/netty/netty-tcnative/commit/59662a8b07a9a7623ae1bc472f5751f31c81a118
https://github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.84.Final
https://github.com/netty/netty-tcnative/security/advisories/GHSA-mmc8-vg2v-fvvw
https://www.vulncheck.com/advisories/netty-tcnative-2.0.66-final-before-2.0.84-final-use-after-free-in-session-ticket-callback

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-55654PoC
MEDIUMCVE-2025-60476PoC
MEDIUMCVE-2025-60478PoC
MEDIUMCVE-2025-60491PoC
CRITICALCVE-2026-0163
HIGHCVE-2026-100200
CRITICALCVE-2026-100202
HIGHCVE-2026-100209

Related by shared AI tags and CWE weakness class. Browse the full archive.