Dashboard / CVE-2026-40542

CVE-2026-40542

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-04-22 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
apache httpclient 5.6

References & Advisories (16)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.54%
Raw Score 0.005360
Percentile 45.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00536
2026-10-28
0.00536

Intelligence Sources

nvd ref →

External Links