Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Apache HttpClient and Apache Neethi ( CVE-2026-40542, CVE-2026-42402, CVE-2026-42403 & CVE-2026-42404 )

Summary IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Apache HttpClient and Apache Neethi. Vulnerability Details CVEID:CVE-2026-40542 DESCRIPTION: Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept...

Critical: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.SP2)

An update for Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available RHBQ 3.27.3.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

CVE-2026-42403 vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2026-42403

creationtimestamp| type| source ---|---|--- 2026-05-01 10:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrxpyqkym2i...

org.apache.geronimo.configs:axis2 (>=2.1, <=2.1.8), org.apache.geronimo.configs:axis2-deployer (>=2.1, <=2.1.4) +20 more potentially affected by CVE-2026-42403 via org.apache.neethi:neethi (2.0)

org.apache.neethi:neethi MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.neethi:neethi and may be impacted: - org.apache.geronimo.configs:axis2 =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1,...

org.apache.axis2:addressing (1.2), org.apache.axis2:axis2-adb (1.2) +24 more potentially affected by CVE-2026-42403 via org.apache.neethi:neethi (2.0.1)

org.apache.neethi:neethi MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.neethi:neethi and may be impacted: - org.apache.axis2:addressing 1.2 - org.apache.axis2:axis2-adb 1.2 - org.apache.axis2:axis2-adb-codegen 1.2 -...

com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.10), com.github.krasa:krasa-jaxb-tools (1.8) +514 more potentially affected by CVE-2026-42403 via org.apache.neethi:neethi (2.0.4)

org.apache.neethi:neethi MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.neethi:neethi and may be impacted: - com.custardsource.parfait:parfait-cxf =0.2.0, =0.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =4.0.3, =1.0,...