CyberRota
Back to database

CVE-2026-40542

HIGH · CVSS 7.3 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-22 · Last synced: 2026-05-18

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE
CVE-2026-40542
Severity
HIGH
CVSS
7.3
EPSS
0.10%
Apache

Original NVD Description

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue.