ROOT-APP-MAVEN-CVE-2026-40542 CVE-2026-40542 in org.apache.httpcomponents.client5:httpclient5 - Patched by Root

Root has patched CVE-2026-40542 in the org.apache.httpcomponents.client5:httpclient5 package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Apache HttpClient and Apache Neethi ( CVE-2026-40542, CVE-2026-42402, CVE-2026-42403 & CVE-2026-42404 )

Summary IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Apache HttpClient and Apache Neethi. Vulnerability Details CVEID:CVE-2026-40542 DESCRIPTION: Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept...

Security Bulletin: MongoDB Enterprised Advanced affected by: Missing Critical Step in Authentication (CVE-2026-40542)

Summary There are vulnerabilities in httpclient5-5.6.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-40542. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-40542 DESCRIPTION: Missing critical step in authentication in Apache HttpClient 5.6 allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-40542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper...

ai.philterd:phileas (>=3.1.0, <=3.3.0), ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4) +1332 more potentially affected by CVE-2026-40542 via org.apache.httpcomponents.client5:httpclient5 (>=5.6-alpha1, <=5.6)

org.apache.httpcomponents.client5:httpclient5 MAVEN version =5.6-alpha1, =3.1.0, =0.1.2, =0.7.20, =0.7.20, =0.7.20, =4.43.0.002, =4.0.0, =4.0.0, =4.0.0, =9.0.10, =9.2.5, =1.8.6, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-40542 Source advisory:...

ai.philterd:phileas (>=3.1.0, <=3.3.0), ai.pipestream.module:module-opensearch-sink (>=0.1.2, <=0.1.4) +1332 more potentially affected by CVE-2026-40542 via org.apache.httpcomponents.client5:httpclient5 (>=5.6-alpha1, <=5.6)

org.apache.httpcomponents.client5:httpclient5 MAVEN version =5.6-alpha1, =3.1.0, =0.1.2, =0.7.20, =0.7.20, =0.7.20, =4.43.0.002, =4.0.0, =4.0.0, =4.0.0, =9.0.10, =9.2.5, =1.8.6, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-40542 Source advisory: GHSA-V468-QCJX-R72W...

UBUNTU-CVE-2026-40542

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue...

CVE-2026-40542

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes this issue...