CVE-2026-102476 in Vert.xinformação

Sumário

de MITRE • 14/10/2026

In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context and obtain an SSL context with weaker properties, for instance a context with hostname validation and obtain a context ignoring hostname validation.



The impacted component is io.vertx:vertx-core.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

Eclipse

Reservar

29/09/2026

Divulgação

14/10/2026

Moderação

aceite

Entrada

VDB-420290

EPSS

0.00000

KEV

não

Atividades

baixo

Fontes

Do you want to use VulDB in your project?

Use the official API to access entries easily!