CVE-2026-109408

A flaw was found in vault-java-driver. Under certain configuration conditions, the driver fails to properly enforce Transport Layer Security TLS certificate and hostname verification even when verification has been requested. An attacker positioned on the network path between the client and the...