cbcvebase.

Apache Software Foundation Apache Httpclient vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_httpclient.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-40542P3HIGHCVSS 7.3≥ 5.6, < 5.6.12026-04-22
CVE-2026-40542 [HIGH] CWE-304 CVE-2026-40542: Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the cli Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue.
nvd
Apache Software Foundation Apache Httpclient vulnerabilities | cvebase