CVE-2026-41860 - BOSH Basic-Auth Credential Disclosure via SSL Verification Bypass
CVE ID :CVE-2026-41860 Published : June 4, 2026, 1:40 a.m. | 1 hour, 33 minutes ago Description :CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous...