Netty

United States Open Source netty.io ↗
B
MODERATE
70
Total CVEs
31
Crit / High
21
Medium
6%
Unpatched
86%
Patched
6.8
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
86%
Unpatched
6%
Under Review
4%
No Status
5%
✓ 73 patched ✗ 5 unpatched ~ 3 under review
▸ Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"netty" port:443
org:"Netty" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-93574 1.35% exploitation probability
CVE-2026-93573 0.90% exploitation probability
CVE-2026-93488 0.80% exploitation probability
CVE-2026-93491 0.73% exploitation probability
CVE-2026-93575 0.66% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
70
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
6%
Avg CVSS score
6.8
Security grade
B (MODERATE)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Critical Atlassian Bamboo Data Center and Server Flaw Enables Command Injection Attacks - CyberSecurityNews
CyberSecurityNews 2026-04-22
91 Spring Vulnerabilities Impact 209,000+ Software Components Across Open-Source Ecosystem - CyberSecurityNews
CyberSecurityNews 2026-08-25
New critical internet flaw lets hackers send unlimited requests and crash servers - Cybernews
Cybernews 2025-08-14
▸ Recent CVEs showing 20 of 85
CVE IDSeverityPatchEPSSDate
CVE-2026-100658 5.3 MEDIUM REJECTED / WITHDRAWN 0.35% 2026-09-26
CVE-2026-100656 7.5 HIGH REJECTED / WITHDRAWN 0.43% 2026-09-26
CVE-2026-100659 6.5 MEDIUM PATCHED / FIX AVAILABLE 0.24% 2026-09-26
CVE-2026-100666 7.3 HIGH PATCH UNDER REVIEW 0.24% 2026-09-26
CVE-2026-100661 7.5 HIGH PATCHED / FIX AVAILABLE 0.34% 2026-09-26
CVE-2026-100655 7.5 HIGH REJECTED / WITHDRAWN 0.25% 2026-09-26
CVE-2026-100663 7.5 HIGH PATCHED / FIX AVAILABLE 0.30% 2026-09-26
CVE-2026-100665 7.5 HIGH PATCHED / FIX AVAILABLE 0.29% 2026-09-26
CVE-2026-100662 7.5 HIGH PATCHED / FIX AVAILABLE 0.34% 2026-09-26
CVE-2026-100660 7.5 HIGH PATCHED / FIX AVAILABLE 0.38% 2026-09-26
CVE-2026-100664 7.5 HIGH PATCHED / FIX AVAILABLE 0.33% 2026-09-26
CVE-2026-100657 7.5 HIGH REJECTED / WITHDRAWN 0.34% 2026-09-26
CVE-2026-93574 6.5 MEDIUM PATCHED / FIX AVAILABLE 1.35% 2026-09-18
CVE-2026-93492 5.3 MEDIUM PATCHED / FIX AVAILABLE 0.37% 2026-09-18
CVE-2026-93493 5.9 MEDIUM UNKNOWN / UNPATCHED 0.28% 2026-09-18
CVE-2026-93491 7.5 HIGH PATCHED / FIX AVAILABLE 0.73% 2026-09-18
CVE-2026-93573 6.5 MEDIUM PATCHED / FIX AVAILABLE 0.90% 2026-09-18
CVE-2026-93575 7.5 HIGH UNKNOWN / UNPATCHED 0.66% 2026-09-18
CVE-2026-93488 7.5 HIGH PATCHED / FIX AVAILABLE 0.80% 2026-09-18
CVE-2026-93566 PoC 6.5 MEDIUM PATCHED / FIX AVAILABLE 0.48% 2026-09-18
View all 85 CVEs for Netty →
▸Intel
CountryUnited States
LicenseOpen Source
Trust ScoreB — MODERATE
Max CVSS8.7
Last Updated2026-08-03
▸Top Weaknesses
CWE-400
Uncontrolled Resource Consumption
19 occurrences in Netty CVEs (27% of total)
CWE-400 ⓘ
19
CWE-770
Unknown Weakness Type
8 occurrences in Netty CVEs (11% of total)
CWE-770 ⓘ
8
CWE-444
Unknown Weakness Type
7 occurrences in Netty CVEs (10% of total)
CWE-444 ⓘ
7
CWE-93
Unknown Weakness Type
7 occurrences in Netty CVEs (10% of total)
CWE-93 ⓘ
7
CWE-20
Unknown Weakness Type
3 occurrences in Netty CVEs (4% of total)
CWE-20 ⓘ
3
CWE-345
Unknown Weakness Type
2 occurrences in Netty CVEs (3% of total)
CWE-345 ⓘ
2
CWE-401
Unknown Weakness Type
2 occurrences in Netty CVEs (3% of total)
CWE-401 ⓘ
2
CWE-770 - Allocation of Resources Without Limits or Throttling
Unknown Weakness Type
2 occurrences in Netty CVEs (3% of total)
CWE-770 - Allocation of Resources Without Limits or Throttling ⓘ
2
▸Company Profile

Netty is a high-performance, asynchronous event-driven network application framework for Java, widely used for building scalable server and client-side networking applications. It is a critical component in many enterprise systems, including web servers, messaging systems, and big data platforms, and its security vulnerabilities can have widespread impact due to its extensive use in the software supply chain.

▸Response Metrics
Est. MTTR ⓘ ~58 days (Good)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +638% worse
CVE count 2026 vs 2025:  8 → 59 CVEs
Patch Speed ⓘ Average (40–65%)
6% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€274K
Est. GDPR High
€2.7M

Based on 0 critical CVEs, 0 CISA KEV, 46% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Netty B valtersit.com