网安资讯详情 - SecLens 情报雷达

Netty HTTP Smuggling Vulnerability in Some Huawei Products

来源： huawei_security · 发布时间 2026-07-22 08:00 (UTC+08:00) · 抓取时间 2026-07-22 21:42 (UTC+08:00)

摘要

The Netty network application framework used by some Huawei products has a smuggling vulnerability in the HTTP client codec module. The vulnerability is caused by a flaw in the logic for pairing HTTP responses with requests. Successful exploitation could lead to incorrect pairing of HEAD requests with 200 responses, affecting the integrity and availability of HTTP parsing. (Vulnerability ID:HWPSIRT-2026-84260) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2026-42584

标签

• Critical

扩展字段

{
  "hw_psirt_ids": [
    "HWPSIRT-2026-84260"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-NHSViSHP-59875411",
  "sasn_version": "1.4",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-42584",
      "hwPsirtId": "HWPSIRT-2026-84260"
    }
  ]
}