Apache Httpclient (Apache Software Foundation) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-22. Vendor: Apache Software Foundation.

CVEs of Apache Httpclient

• CVE-2026-40542 - CVSS 7.3 (high), 2026-04-22: Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper…