CVE-2026-56822 | Netty prior 4.1.136.Final/4.2.16.Final OcspServerCertificateValidator OcspServerCertificateValidator.java certificate validation

A vulnerability was found in Netty. It has been declared as problematic. This affects the function io.netty.handler.ssl.ocsp.OcspServerCertificateValidator.userEventTriggered of the file io/netty/handler/ssl/ocsp/OcspServerCertificateValidator.java of the component OcspServerCertificateValidator. Executing a manipulation can lead to improper certificate validation.

This vulnerability is registered as CVE-2026-56822. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.