ROOT-APP-MAVEN-CVE-2026-40542 CVE-2026-40542 in org.apache.httpcomponents.client5:httpclient5 - Patched by Root

Root has patched CVE-2026-40542 in the org.apache.httpcomponents.client5:httpclient5 package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Apache HttpClient and Apache Neethi ( CVE-2026-40542, CVE-2026-42402, CVE-2026-42403 & CVE-2026-42404 )

Summary IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Apache HttpClient and Apache Neethi. Vulnerability Details CVEID:CVE-2026-40542 DESCRIPTION: Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept...

Security Bulletin: MongoDB Enterprised Advanced affected by: Missing Critical Step in Authentication (CVE-2026-40542)

Summary There are vulnerabilities in httpclient5-5.6.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-40542. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-40542 DESCRIPTION: Missing critical step in authentication in Apache HttpClient 5.6 allows an...

CVE-2026-40542 vulnerabilities

Vulnerabilities for packages: trino, apache-nifi, dependency-track, opensearch...

CVE-2026-40542 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch-fips, jbang, dependency-track-apiserver, trino, dependency-track, opensearch, pinot-fips, pinot...

Linux Distros Unpatched Vulnerability : CVE-2026-40542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper...

ai.philterd:phileas (>=3.1.0, <=3.3.0), ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4) +1334 more potentially affected by CVE-2026-40542 via org.apache.httpcomponents.client5:httpclient5 (>=5.6-alpha1, <=5.6)

org.apache.httpcomponents.client5:httpclient5 MAVEN version =5.6-alpha1, =3.1.0, =0.1.2, =0.7.20, =0.7.20, =0.7.20, =4.43.0.002, =4.0.0, =4.0.0, =4.0.0, =9.0.10, =9.2.5, =1.8.6, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-40542 Source advisory:...

ai.philterd:phileas (>=3.1.0, <=3.3.0), ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4) +1334 more potentially affected by CVE-2026-40542 via org.apache.httpcomponents.client5:httpclient5 (>=5.6-alpha1, <=5.6)

org.apache.httpcomponents.client5:httpclient5 MAVEN version =5.6-alpha1, =3.1.0, =0.1.2, =0.7.20, =0.7.20, =0.7.20, =4.43.0.002, =4.0.0, =4.0.0, =4.0.0, =9.0.10, =9.2.5, =1.8.6, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-40542 Source advisory: GHSA-V468-QCJX-R72W...

CVE-2026-40542

creationtimestamp| type| source ---|---|--- 2026-04-22 08:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk333xsffz2e 2026-04-22 15:24:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk3skbh6ht2h 2026-04-22 17:24:29+00:00| seen|...

UBUNTU-CVE-2026-40542

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue...

CVE-2026-40542 Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue...

ai.philterd:phileas (>=3.1.0, <=3.3.0), ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4) +1334 more potentially affected by CVE-2026-40542 via org.apache.httpcomponents.client5:httpclient5 (>=5.6-alpha1, <=5.6)

org.apache.httpcomponents.client5:httpclient5 MAVEN version =5.6-alpha1, =3.1.0, =0.1.2, =0.7.20, =0.7.20, =0.7.20, =4.43.0.002, =4.0.0, =4.0.0, =4.0.0, =9.0.10, =9.2.5, =1.8.6, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-40542 Source advisory: MEND:CVE-2026-40542...

CVE-2026-40542

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue...