CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-47845

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 7.2%

CVSS Severity

CVSS v3 Score 5.3

References

https://spring.io/security/cve-2026-47845

Products affected by CVE-2026-47845

Broadcom » Reactor Netty » Version: 0.5.1

cpe:2.3:a:broadcom:reactor_netty:0.5.1
Broadcom » Reactor Netty » Version: 0.5.2

cpe:2.3:a:broadcom:reactor_netty:0.5.2
Broadcom » Reactor Netty » Version: 0.6.0

cpe:2.3:a:broadcom:reactor_netty:0.6.0
Broadcom » Reactor Netty » Version: 0.6.1

cpe:2.3:a:broadcom:reactor_netty:0.6.1
Broadcom » Reactor Netty » Version: 0.6.2

cpe:2.3:a:broadcom:reactor_netty:0.6.2
Broadcom » Reactor Netty » Version: 0.6.3

cpe:2.3:a:broadcom:reactor_netty:0.6.3
Broadcom » Reactor Netty » Version: 0.6.4

cpe:2.3:a:broadcom:reactor_netty:0.6.4
Broadcom » Reactor Netty » Version: 0.6.5

cpe:2.3:a:broadcom:reactor_netty:0.6.5
Broadcom » Reactor Netty » Version: 0.6.6

cpe:2.3:a:broadcom:reactor_netty:0.6.6
Broadcom » Reactor Netty » Version: 0.7.0

cpe:2.3:a:broadcom:reactor_netty:0.7.0
Broadcom » Reactor Netty » Version: 0.7.1

cpe:2.3:a:broadcom:reactor_netty:0.7.1
Broadcom » Reactor Netty » Version: 0.7.10

cpe:2.3:a:broadcom:reactor_netty:0.7.10
Broadcom » Reactor Netty » Version: 0.7.11

cpe:2.3:a:broadcom:reactor_netty:0.7.11
Broadcom » Reactor Netty » Version: 0.7.12

cpe:2.3:a:broadcom:reactor_netty:0.7.12
Broadcom » Reactor Netty » Version: 0.7.13

cpe:2.3:a:broadcom:reactor_netty:0.7.13
Broadcom » Reactor Netty » Version: 0.7.14

cpe:2.3:a:broadcom:reactor_netty:0.7.14
Broadcom » Reactor Netty » Version: 0.7.15

cpe:2.3:a:broadcom:reactor_netty:0.7.15
Broadcom » Reactor Netty » Version: 0.7.2

cpe:2.3:a:broadcom:reactor_netty:0.7.2
Broadcom » Reactor Netty » Version: 0.7.3

cpe:2.3:a:broadcom:reactor_netty:0.7.3
Broadcom » Reactor Netty » Version: 0.7.4

cpe:2.3:a:broadcom:reactor_netty:0.7.4
Broadcom » Reactor Netty » Version: 0.7.5

cpe:2.3:a:broadcom:reactor_netty:0.7.5
Broadcom » Reactor Netty » Version: 0.7.6

cpe:2.3:a:broadcom:reactor_netty:0.7.6
Broadcom » Reactor Netty » Version: 0.7.7

cpe:2.3:a:broadcom:reactor_netty:0.7.7
Broadcom » Reactor Netty » Version: 0.7.8

cpe:2.3:a:broadcom:reactor_netty:0.7.8
Broadcom » Reactor Netty » Version: 0.7.9

cpe:2.3:a:broadcom:reactor_netty:0.7.9
Broadcom » Reactor Netty » Version: 0.8.0

cpe:2.3:a:broadcom:reactor_netty:0.8.0
Broadcom » Reactor Netty » Version: 0.8.1

cpe:2.3:a:broadcom:reactor_netty:0.8.1
Broadcom » Reactor Netty » Version: 0.8.10

cpe:2.3:a:broadcom:reactor_netty:0.8.10
Broadcom » Reactor Netty » Version: 0.8.11

cpe:2.3:a:broadcom:reactor_netty:0.8.11
Broadcom » Reactor Netty » Version: 0.8.12

cpe:2.3:a:broadcom:reactor_netty:0.8.12
Broadcom » Reactor Netty » Version: 0.8.13

cpe:2.3:a:broadcom:reactor_netty:0.8.13
Broadcom » Reactor Netty » Version: 0.8.14

cpe:2.3:a:broadcom:reactor_netty:0.8.14
Broadcom » Reactor Netty » Version: 0.8.15

cpe:2.3:a:broadcom:reactor_netty:0.8.15
Broadcom » Reactor Netty » Version: 0.8.16

cpe:2.3:a:broadcom:reactor_netty:0.8.16
Broadcom » Reactor Netty » Version: 0.8.2

cpe:2.3:a:broadcom:reactor_netty:0.8.2
Broadcom » Reactor Netty » Version: 0.8.3

cpe:2.3:a:broadcom:reactor_netty:0.8.3
Broadcom » Reactor Netty » Version: 0.8.4

cpe:2.3:a:broadcom:reactor_netty:0.8.4
Broadcom » Reactor Netty » Version: 0.8.5

cpe:2.3:a:broadcom:reactor_netty:0.8.5
Broadcom » Reactor Netty » Version: 0.8.6

cpe:2.3:a:broadcom:reactor_netty:0.8.6
Broadcom » Reactor Netty » Version: 0.8.7

cpe:2.3:a:broadcom:reactor_netty:0.8.7
Broadcom » Reactor Netty » Version: 0.8.8

cpe:2.3:a:broadcom:reactor_netty:0.8.8
Broadcom » Reactor Netty » Version: 0.8.9

cpe:2.3:a:broadcom:reactor_netty:0.8.9
Broadcom » Reactor Netty » Version: 0.9.0

cpe:2.3:a:broadcom:reactor_netty:0.9.0
Broadcom » Reactor Netty » Version: 0.9.1

cpe:2.3:a:broadcom:reactor_netty:0.9.1
Broadcom » Reactor Netty » Version: 0.9.10

cpe:2.3:a:broadcom:reactor_netty:0.9.10
Broadcom » Reactor Netty » Version: 0.9.11

cpe:2.3:a:broadcom:reactor_netty:0.9.11
Broadcom » Reactor Netty » Version: 0.9.12

cpe:2.3:a:broadcom:reactor_netty:0.9.12
Broadcom » Reactor Netty » Version: 0.9.13

cpe:2.3:a:broadcom:reactor_netty:0.9.13
Broadcom » Reactor Netty » Version: 0.9.14

cpe:2.3:a:broadcom:reactor_netty:0.9.14
Broadcom » Reactor Netty » Version: 0.9.15

cpe:2.3:a:broadcom:reactor_netty:0.9.15
Broadcom » Reactor Netty » Version: 0.9.16

cpe:2.3:a:broadcom:reactor_netty:0.9.16
Broadcom » Reactor Netty » Version: 0.9.17

cpe:2.3:a:broadcom:reactor_netty:0.9.17
Broadcom » Reactor Netty » Version: 0.9.18

cpe:2.3:a:broadcom:reactor_netty:0.9.18
Broadcom » Reactor Netty » Version: 0.9.19

cpe:2.3:a:broadcom:reactor_netty:0.9.19
Broadcom » Reactor Netty » Version: 0.9.2

cpe:2.3:a:broadcom:reactor_netty:0.9.2
Broadcom » Reactor Netty » Version: 0.9.20

cpe:2.3:a:broadcom:reactor_netty:0.9.20
Broadcom » Reactor Netty » Version: 0.9.21

cpe:2.3:a:broadcom:reactor_netty:0.9.21
Broadcom » Reactor Netty » Version: 0.9.22

cpe:2.3:a:broadcom:reactor_netty:0.9.22
Broadcom » Reactor Netty » Version: 0.9.23

cpe:2.3:a:broadcom:reactor_netty:0.9.23
Broadcom » Reactor Netty » Version: 0.9.24

cpe:2.3:a:broadcom:reactor_netty:0.9.24
Broadcom » Reactor Netty » Version: 0.9.25

cpe:2.3:a:broadcom:reactor_netty:0.9.25
Broadcom » Reactor Netty » Version: 0.9.3

cpe:2.3:a:broadcom:reactor_netty:0.9.3
Broadcom » Reactor Netty » Version: 0.9.4

cpe:2.3:a:broadcom:reactor_netty:0.9.4
Broadcom » Reactor Netty » Version: 0.9.5

cpe:2.3:a:broadcom:reactor_netty:0.9.5
Broadcom » Reactor Netty » Version: 0.9.6

cpe:2.3:a:broadcom:reactor_netty:0.9.6
Broadcom » Reactor Netty » Version: 0.9.7

cpe:2.3:a:broadcom:reactor_netty:0.9.7
Broadcom » Reactor Netty » Version: 0.9.8

cpe:2.3:a:broadcom:reactor_netty:0.9.8
Broadcom » Reactor Netty » Version: 0.9.9

cpe:2.3:a:broadcom:reactor_netty:0.9.9
Broadcom » Reactor Netty » Version: 1.0.0

cpe:2.3:a:broadcom:reactor_netty:1.0.0
Broadcom » Reactor Netty » Version: 1.0.1

cpe:2.3:a:broadcom:reactor_netty:1.0.1
Broadcom » Reactor Netty » Version: 1.0.10

cpe:2.3:a:broadcom:reactor_netty:1.0.10
Broadcom » Reactor Netty » Version: 1.0.11

cpe:2.3:a:broadcom:reactor_netty:1.0.11
Broadcom » Reactor Netty » Version: 1.0.12

cpe:2.3:a:broadcom:reactor_netty:1.0.12
Broadcom » Reactor Netty » Version: 1.0.13

cpe:2.3:a:broadcom:reactor_netty:1.0.13
Broadcom » Reactor Netty » Version: 1.0.14

cpe:2.3:a:broadcom:reactor_netty:1.0.14
Broadcom » Reactor Netty » Version: 1.0.15

cpe:2.3:a:broadcom:reactor_netty:1.0.15
Broadcom » Reactor Netty » Version: 1.0.16

cpe:2.3:a:broadcom:reactor_netty:1.0.16
Broadcom » Reactor Netty » Version: 1.0.17

cpe:2.3:a:broadcom:reactor_netty:1.0.17
Broadcom » Reactor Netty » Version: 1.0.18

cpe:2.3:a:broadcom:reactor_netty:1.0.18
Broadcom » Reactor Netty » Version: 1.0.19

cpe:2.3:a:broadcom:reactor_netty:1.0.19
Broadcom » Reactor Netty » Version: 1.0.2

cpe:2.3:a:broadcom:reactor_netty:1.0.2
Broadcom » Reactor Netty » Version: 1.0.20

cpe:2.3:a:broadcom:reactor_netty:1.0.20
Broadcom » Reactor Netty » Version: 1.0.21

cpe:2.3:a:broadcom:reactor_netty:1.0.21
Broadcom » Reactor Netty » Version: 1.0.22

cpe:2.3:a:broadcom:reactor_netty:1.0.22
Broadcom » Reactor Netty » Version: 1.0.23

cpe:2.3:a:broadcom:reactor_netty:1.0.23
Broadcom » Reactor Netty » Version: 1.0.24

cpe:2.3:a:broadcom:reactor_netty:1.0.24
Broadcom » Reactor Netty » Version: 1.0.25

cpe:2.3:a:broadcom:reactor_netty:1.0.25
Broadcom » Reactor Netty » Version: 1.0.26

cpe:2.3:a:broadcom:reactor_netty:1.0.26
Broadcom » Reactor Netty » Version: 1.0.27

cpe:2.3:a:broadcom:reactor_netty:1.0.27
Broadcom » Reactor Netty » Version: 1.0.28

cpe:2.3:a:broadcom:reactor_netty:1.0.28
Broadcom » Reactor Netty » Version: 1.0.29

cpe:2.3:a:broadcom:reactor_netty:1.0.29
Broadcom » Reactor Netty » Version: 1.0.3

cpe:2.3:a:broadcom:reactor_netty:1.0.3
Broadcom » Reactor Netty » Version: 1.0.30

cpe:2.3:a:broadcom:reactor_netty:1.0.30
Broadcom » Reactor Netty » Version: 1.0.31

cpe:2.3:a:broadcom:reactor_netty:1.0.31
Broadcom » Reactor Netty » Version: 1.0.32

cpe:2.3:a:broadcom:reactor_netty:1.0.32
Broadcom » Reactor Netty » Version: 1.0.33

cpe:2.3:a:broadcom:reactor_netty:1.0.33
Broadcom » Reactor Netty » Version: 1.0.34

cpe:2.3:a:broadcom:reactor_netty:1.0.34
Broadcom » Reactor Netty » Version: 1.0.35

cpe:2.3:a:broadcom:reactor_netty:1.0.35
Broadcom » Reactor Netty » Version: 1.0.36

cpe:2.3:a:broadcom:reactor_netty:1.0.36
Broadcom » Reactor Netty » Version: 1.0.37

cpe:2.3:a:broadcom:reactor_netty:1.0.37
Broadcom » Reactor Netty » Version: 1.0.38

cpe:2.3:a:broadcom:reactor_netty:1.0.38
Broadcom » Reactor Netty » Version: 1.0.39

cpe:2.3:a:broadcom:reactor_netty:1.0.39
Broadcom » Reactor Netty » Version: 1.0.4

cpe:2.3:a:broadcom:reactor_netty:1.0.4
Broadcom » Reactor Netty » Version: 1.0.40

cpe:2.3:a:broadcom:reactor_netty:1.0.40
Broadcom » Reactor Netty » Version: 1.0.41

cpe:2.3:a:broadcom:reactor_netty:1.0.41
Broadcom » Reactor Netty » Version: 1.0.42

cpe:2.3:a:broadcom:reactor_netty:1.0.42
Broadcom » Reactor Netty » Version: 1.0.43

cpe:2.3:a:broadcom:reactor_netty:1.0.43
Broadcom » Reactor Netty » Version: 1.0.44

cpe:2.3:a:broadcom:reactor_netty:1.0.44
Broadcom » Reactor Netty » Version: 1.0.45

cpe:2.3:a:broadcom:reactor_netty:1.0.45
Broadcom » Reactor Netty » Version: 1.0.46

cpe:2.3:a:broadcom:reactor_netty:1.0.46
Broadcom » Reactor Netty » Version: 1.0.47

cpe:2.3:a:broadcom:reactor_netty:1.0.47
Broadcom » Reactor Netty » Version: 1.0.48

cpe:2.3:a:broadcom:reactor_netty:1.0.48
Broadcom » Reactor Netty » Version: 1.0.49

cpe:2.3:a:broadcom:reactor_netty:1.0.49
Broadcom » Reactor Netty » Version: 1.0.5

cpe:2.3:a:broadcom:reactor_netty:1.0.5
Broadcom » Reactor Netty » Version: 1.0.50

cpe:2.3:a:broadcom:reactor_netty:1.0.50
Broadcom » Reactor Netty » Version: 1.0.51

cpe:2.3:a:broadcom:reactor_netty:1.0.51
Broadcom » Reactor Netty » Version: 1.0.52

cpe:2.3:a:broadcom:reactor_netty:1.0.52
Broadcom » Reactor Netty » Version: 1.0.6

cpe:2.3:a:broadcom:reactor_netty:1.0.6
Broadcom » Reactor Netty » Version: 1.0.7

cpe:2.3:a:broadcom:reactor_netty:1.0.7
Broadcom » Reactor Netty » Version: 1.0.8

cpe:2.3:a:broadcom:reactor_netty:1.0.8
Broadcom » Reactor Netty » Version: 1.0.9

cpe:2.3:a:broadcom:reactor_netty:1.0.9
Broadcom » Reactor Netty » Version: 1.1.0

cpe:2.3:a:broadcom:reactor_netty:1.1.0
Broadcom » Reactor Netty » Version: 1.1.1

cpe:2.3:a:broadcom:reactor_netty:1.1.1
Broadcom » Reactor Netty » Version: 1.1.10

cpe:2.3:a:broadcom:reactor_netty:1.1.10
Broadcom » Reactor Netty » Version: 1.1.12

cpe:2.3:a:broadcom:reactor_netty:1.1.12
Broadcom » Reactor Netty » Version: 1.1.13

cpe:2.3:a:broadcom:reactor_netty:1.1.13
Broadcom » Reactor Netty » Version: 1.1.14

cpe:2.3:a:broadcom:reactor_netty:1.1.14
Broadcom » Reactor Netty » Version: 1.1.15

cpe:2.3:a:broadcom:reactor_netty:1.1.15
Broadcom » Reactor Netty » Version: 1.1.16

cpe:2.3:a:broadcom:reactor_netty:1.1.16
Broadcom » Reactor Netty » Version: 1.1.17

cpe:2.3:a:broadcom:reactor_netty:1.1.17
Broadcom » Reactor Netty » Version: 1.1.18

cpe:2.3:a:broadcom:reactor_netty:1.1.18
Broadcom » Reactor Netty » Version: 1.1.19

cpe:2.3:a:broadcom:reactor_netty:1.1.19
Broadcom » Reactor Netty » Version: 1.1.2

cpe:2.3:a:broadcom:reactor_netty:1.1.2
Broadcom » Reactor Netty » Version: 1.1.20

cpe:2.3:a:broadcom:reactor_netty:1.1.20
Broadcom » Reactor Netty » Version: 1.1.21

cpe:2.3:a:broadcom:reactor_netty:1.1.21
Broadcom » Reactor Netty » Version: 1.1.22

cpe:2.3:a:broadcom:reactor_netty:1.1.22
Broadcom » Reactor Netty » Version: 1.1.23

cpe:2.3:a:broadcom:reactor_netty:1.1.23
Broadcom » Reactor Netty » Version: 1.1.24

cpe:2.3:a:broadcom:reactor_netty:1.1.24
Broadcom » Reactor Netty » Version: 1.1.25

cpe:2.3:a:broadcom:reactor_netty:1.1.25
Broadcom » Reactor Netty » Version: 1.1.26

cpe:2.3:a:broadcom:reactor_netty:1.1.26
Broadcom » Reactor Netty » Version: 1.1.27

cpe:2.3:a:broadcom:reactor_netty:1.1.27
Broadcom » Reactor Netty » Version: 1.1.28

cpe:2.3:a:broadcom:reactor_netty:1.1.28
Broadcom » Reactor Netty » Version: 1.1.29

cpe:2.3:a:broadcom:reactor_netty:1.1.29
Broadcom » Reactor Netty » Version: 1.1.3

cpe:2.3:a:broadcom:reactor_netty:1.1.3
Broadcom » Reactor Netty » Version: 1.1.30

cpe:2.3:a:broadcom:reactor_netty:1.1.30
Broadcom » Reactor Netty » Version: 1.1.31

cpe:2.3:a:broadcom:reactor_netty:1.1.31
Broadcom » Reactor Netty » Version: 1.1.4

cpe:2.3:a:broadcom:reactor_netty:1.1.4
Broadcom » Reactor Netty » Version: 1.1.5

cpe:2.3:a:broadcom:reactor_netty:1.1.5
Broadcom » Reactor Netty » Version: 1.1.6

cpe:2.3:a:broadcom:reactor_netty:1.1.6
Broadcom » Reactor Netty » Version: 1.1.7

cpe:2.3:a:broadcom:reactor_netty:1.1.7
Broadcom » Reactor Netty » Version: 1.1.8

cpe:2.3:a:broadcom:reactor_netty:1.1.8
Broadcom » Reactor Netty » Version: 1.1.9

cpe:2.3:a:broadcom:reactor_netty:1.1.9
Broadcom » Reactor Netty » Version: 1.2.0

cpe:2.3:a:broadcom:reactor_netty:1.2.0
Broadcom » Reactor Netty » Version: 1.2.1

cpe:2.3:a:broadcom:reactor_netty:1.2.1
Broadcom » Reactor Netty » Version: 1.2.10

cpe:2.3:a:broadcom:reactor_netty:1.2.10
Broadcom » Reactor Netty » Version: 1.2.11

cpe:2.3:a:broadcom:reactor_netty:1.2.11
Broadcom » Reactor Netty » Version: 1.2.12

cpe:2.3:a:broadcom:reactor_netty:1.2.12
Broadcom » Reactor Netty » Version: 1.2.13

cpe:2.3:a:broadcom:reactor_netty:1.2.13
Broadcom » Reactor Netty » Version: 1.2.14

cpe:2.3:a:broadcom:reactor_netty:1.2.14
Broadcom » Reactor Netty » Version: 1.2.15

cpe:2.3:a:broadcom:reactor_netty:1.2.15
Broadcom » Reactor Netty » Version: 1.2.16

cpe:2.3:a:broadcom:reactor_netty:1.2.16
Broadcom » Reactor Netty » Version: 1.2.17

cpe:2.3:a:broadcom:reactor_netty:1.2.17
Broadcom » Reactor Netty » Version: 1.2.17.1

cpe:2.3:a:broadcom:reactor_netty:1.2.17.1
Broadcom » Reactor Netty » Version: 1.2.18

cpe:2.3:a:broadcom:reactor_netty:1.2.18
Broadcom » Reactor Netty » Version: 1.2.2

cpe:2.3:a:broadcom:reactor_netty:1.2.2
Broadcom » Reactor Netty » Version: 1.2.3

cpe:2.3:a:broadcom:reactor_netty:1.2.3
Broadcom » Reactor Netty » Version: 1.2.4

cpe:2.3:a:broadcom:reactor_netty:1.2.4
Broadcom » Reactor Netty » Version: 1.2.5

cpe:2.3:a:broadcom:reactor_netty:1.2.5
Broadcom » Reactor Netty » Version: 1.2.6

cpe:2.3:a:broadcom:reactor_netty:1.2.6
Broadcom » Reactor Netty » Version: 1.2.7

cpe:2.3:a:broadcom:reactor_netty:1.2.7
Broadcom » Reactor Netty » Version: 1.2.8

cpe:2.3:a:broadcom:reactor_netty:1.2.8
Broadcom » Reactor Netty » Version: 1.2.9

cpe:2.3:a:broadcom:reactor_netty:1.2.9
Broadcom » Reactor Netty » Version: 1.3.0

cpe:2.3:a:broadcom:reactor_netty:1.3.0
Broadcom » Reactor Netty » Version: 1.3.1

cpe:2.3:a:broadcom:reactor_netty:1.3.1
Broadcom » Reactor Netty » Version: 1.3.2

cpe:2.3:a:broadcom:reactor_netty:1.3.2
Broadcom » Reactor Netty » Version: 1.3.3

cpe:2.3:a:broadcom:reactor_netty:1.3.3
Broadcom » Reactor Netty » Version: 1.3.4

cpe:2.3:a:broadcom:reactor_netty:1.3.4
Broadcom » Reactor Netty » Version: 1.3.5

cpe:2.3:a:broadcom:reactor_netty:1.3.5
Broadcom » Reactor Netty » Version: 1.3.5.1

cpe:2.3:a:broadcom:reactor_netty:1.3.5.1
Broadcom » Reactor Netty » Version: 1.3.6

cpe:2.3:a:broadcom:reactor_netty:1.3.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-47845

Products

Pricing

Contact Us