EUVD-2026-41094

🗓️ 01 Jul 2026 17:02:21Reported by EUVDType

Uncontrolled resource use in Apache HttpComponents Core parser causes denial from excessive headers

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Denial of Service Vulnerability in Electronic Service Agent [CVE-2026-54399]	31 Jul 202601:22	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to linkify-it and httpcore5 (CVE-2026-59887, CVE-2026-54428 & CVE-2026-54399)	31 Jul 202614:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	30 Jul 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses httpcore5-5.3.4.jar which is vulnerable to CVE-2026-54399	6 Aug 202614:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in httpcore5 jar (CVE-2026-54399)	7 Aug 202605:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption vulnerability in Apache HttpComponents [CVE-2026-54399]	27 Jul 202620:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by HTTP message parser vulnerability due to Apache HttpComponents Core	7 Aug 202611:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities	30 Jul 202608:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by Uncontrolled Resource Consumption vulnerability in Apache HttpComponents Core	7 Aug 202607:41	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "6d8d3b36-706a-37f8-8ff5-065b97dd51f2",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "3c27d83b-6a91-3c18-bc05-0ae83cd1f676",
        "product": {
          "name": "Apache HttpComponents Core",
          "vendor": {
            "name": "Apache Software Foundation"
          }
        },
        "product_version": "5.0-alpha ≤5.4.2"
      },
      {
        "id": "e44ed927-2b61-3aac-be45-a272ca6cc197",
        "product": {
          "name": "Apache HttpComponents Core",
          "vendor": {
            "name": "Apache Software Foundation"
          }
        },
        "product_version": "5.5-alpha ≤5.5-beta1"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy

01 Jul 2026 17:36Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00565

SSVC