CVE-2026-40542 in HttpClientinfo

Zusammenfassung

von MITRE • 22.04.2026

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Apache

Reservieren

14.04.2026

Veröffentlichung

22.04.2026

Moderieren

akzeptiert

Eintrag

VDB-358786

CPE

bereit

CWE

CWE-304 (bestätigt)

CVSS

7.3 (VulDB)

EPSS

0.00054

KEV

nein

Aktivitäten

low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-40542
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-40542
CVE Details	https://www.cvedetails.com/cve/CVE-2026-40542/

◂ Zurück Übersicht Weiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!