CVE-2026-107938

A flaw was found in Apache CXF's Netty-based HTTP client transport. This flaw enables information disclosure because the client fails to verify that the server's identity matches the host name in the Transport Layer Security TLS certificate. A network attacker capable of intercepting traffic coul...