Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5191 matches found

NVD
NVD•added 2026/10/07 9:17 p.m.•16 views

CVE-2026-107229

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS0.00261EPSS
SaveExploits0References3
osv_debian
osv_debian•added 2026/10/07 9:17 p.m.•25 views

DEBIAN-CVE-2026-107229

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS6AI score0.00261EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve•added 2026/10/07 9:17 p.m.•14 views

CVE-2026-107229

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS5.8AI score0.00261EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu•added 2026/10/07 9:17 p.m.•22 views

UBUNTU-CVE-2026-107229

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS6AI score0.00261EPSS
SaveExploits0References6
osv_cve
osv_cve•added 2026/10/07 8:57 p.m.•18 views

CVE-2026-107229 AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hosts

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS6AI score
SaveExploits0References5
Mend
Mend•added 2026/10/07 8:57 p.m.•11 views

CVE-2026-107229

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

6.3CVSS6AI score0.00261EPSS
SaveExploits0References3
CVE
CVE•added 2026/10/07 8:57 p.m.•20 views

CVE-2026-107229

The AsyncHttpClient (AHC) library for Java applications contains a vulnerability in the ThreadSafeCookieStore component. From version 2.16.0 until 3.0.14 , the library incompletely validates cookie Domain attributes due to missing private-section and public-suffix rules, lack of A-label normaliza...

4CVSS6AI score0.00261EPSS
SaveExploits0References3
Debian CVE
Debian CVE•added 2026/10/07 8:57 p.m.•17 views

CVE-2026-107229

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS6AI score0.00261EPSS
SaveExploits0
Cvelist
Cvelist•added 2026/10/07 8:57 p.m.•61 views

CVE-2026-107229 AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hosts

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS0.00261EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/10/07 8:57 p.m.•11 views

EUVD-2026-94590

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS5.9AI score0.00261EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/10/07 8:57 p.m.•8 views

CVE-2026-107229 AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hosts

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

4CVSS6AI score0.00261EPSS
SaveExploits0References3
osv_debian
osv_debian•added 2026/10/07 4:19 p.m.•32 views

DEBIAN-CVE-2026-92414

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.1CVSS5.8AI score0.00725EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/07 4:19 p.m.•13 views

CVE-2026-92414

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.3CVSS0.00725EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2026/10/07 4:19 p.m.•14 views

CVE-2026-92414

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.3CVSS5.7AI score0.00725EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu•added 2026/10/07 4:19 p.m.•30 views

UBUNTU-CVE-2026-92414

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.3CVSS5.8AI score0.00725EPSS
SaveExploits0References5
Debian CVE
Debian CVE•added 2026/10/07 3:46 p.m.•18 views

CVE-2026-92414

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.3CVSS5.8AI score0.00725EPSS
SaveExploits0
CVE
CVE•added 2026/10/07 3:46 p.m.•40 views

CVE-2026-92414

The Apache Jackrabbit WebDAV server is vulnerable to a Session Fixation and Session Reuse vulnerability. The flaw occurs because the server attaches a cached authenticated session when it detects a match in the Lock-Token , TransactionId , SubscriptionId , or If-header fields without performing a...

9.3CVSS5.8AI score0.00725EPSS
SaveExploits0References2Affected Software1
Mend
Mend•added 2026/10/07 3:46 p.m.•12 views

CVE-2026-92414

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.3CVSS5.8AI score0.00725EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/10/07 3:46 p.m.•15 views

CVE-2026-92414 Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.3CVSS5.8AI score0.00725EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/07 3:46 p.m.•13 views

EUVD-2026-94406

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

9.3CVSS5.8AI score0.00725EPSS
SaveExploits0References1
Rows per page
Query Builder