CVE ID :CVE-2026-107231 Published : Oct. 7, 2026, 10:17 p.m. | 1 hour, 12 minutes ago Description :The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, Realm.Builder treats a Digest...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107231 - AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

VERWANDTEARTIKEL

CVE-2026-87680 - Brocade Fabric OS Command Injection Vulnerability

CVE-2026-87679 - Brocade Fabric OS Heap-Based Buffer Overflow

CVE-2026-107282 - AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host

CVE-2026-107279 - AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int

CVE-2026-105816 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

CVE-2026-76268 - Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise