{"vulnerability": "cve-2026-56822", "sightings": [{"uuid": "2b583286-5dcb-4ccf-8f77-5602985195b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56822", "type": "seen", "source": "https://www.acn.gov.it/portale/w/netty-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-56822-e-cve-2026-56821", "content": "Disponibili Proof of Concept (PoC) per le vulnerabilit\u00e0 CVE-2026-56822 e CVE-2026-56821 presenti nel componente io.netty:netty-handler-ssl-ocsp del framework open source Netty, ampiamente utilizzato per lo sviluppo di applicazioni di rete in ambiente Java. Tali vulnerabilit\u00e0 - gi\u00e0 sanate dal produttore - potrebbero essere sfruttate, in presenza di determinate condizioni, al fine di eludere i controlli di validazione dei certificati digitali e compromettere la sicurezza delle comunicazioni TLS.", "creation_timestamp": "2026-07-30T01:00:44.631641Z"}, {"uuid": "cb397b3d-1830-4d13-84ab-19c09de96b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56822", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty/security/advisories/GHSA-wc96-39fc-566f", "content": "", "creation_timestamp": "2026-07-22T22:35:10.540308Z"}, {"uuid": "5139fc47-809c-4cb4-9864-e573991adb8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvzcxpus2j", "content": "CVE-2026-56822 - Netty: TOCTOU in OcspServerCertificateValidator\nCVE ID : CVE-2026-56822\n \n Published : July 29, 2026, 12:16 a.m. | 2\u00a0hours, 24\u00a0minutes ago\n \n Description : Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final an...", "creation_timestamp": "2026-07-29T02:48:47.429003Z"}, {"uuid": "3eb4e59a-3d48-4033-8107-989b4f1a1506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56822", "type": "seen", "source": "https://www.acn.gov.it/portale/w/netty-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-56822-e-cve-2026-56821", "content": "", "creation_timestamp": "2026-07-29T12:15:10.916803Z"}]}