A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips…

What to do

1. Check which version of Red Hat Build of Apache Camel 3.33.3.SP2 you run against the affected versions below, and install the vendor's latest release.
2. Until you can update, restrict network access to the affected service so it is not reachable from untrusted networks.

Affected products and versions

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector

NetworkCan be exploited remotely over a network, including the internet.

Attack complexity

LowNo special conditions are needed; the attack works reliably.

Privileges required

NoneNo account or login is needed.

User interaction

NoneNo action by a victim is required.

Scope

UnchangedImpact stays within the vulnerable component.

Confidentiality

NoneNo data is disclosed.

Integrity

HighData or code can be modified at will.

Availability

NoneAvailability is not affected.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. Scored by CNA (redhat.com).

Official description

A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol (RTSP) requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. This vulnerability allows an attacker to bypass method-based access controls and can also be used to launder malicious requests through Netty-based RTSP proxies, making them appear legitimate to backend systems.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

Timeline

1. September 18, 2026CVE record published.
2. September 21, 2026CISA published its SSVC assessment (exploitation: none, automatable: yes, technical impact: partial).
3. November 6, 2026Record last changed materially (score, affected products, status or references).

References

Other vulnerabilities in Red Hat Build of Apache Camel 3.33.3.SP2

• 8.2 High severity

  Red Hat Build of Apache Camel 3.33.3.SP2: Inconsistent Interpretation of HTTP Requests

  CVE-2026-93569Sep 18, 2026Red HatEPSS 2.42%
• 7.5 High severity

  A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending…

  CVE-2026-93568Sep 18, 2026Red HatEPSS 1.08%
• 7.5 High severity

  A flaw was found in Netty's HTTP/2 codec.

  CVE-2026-93567Sep 18, 2026Red HatEPSS 2.89%
• 7.5 High severity

  A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder…

  CVE-2026-93564Sep 18, 2026Red HatEPSS 1.06%
• 7.5 High severity

  A flaw was found in Netty's WebSocketServerExtensionHandler.

  CVE-2026-93558Sep 18, 2026Red HatEPSS 1.22%
• 7.5 High severity

  Red Hat Build of Apache Camel 3.33.3.SP2: Allocation of Resources Without Limits or Throttling

  CVE-2026-93491Sep 18, 2026Red Hat

Spotted an error? Tell us.