CVE-2025-27820

A bug in the PSL validation logic within Apache HttpClient 5.4.x disables domain checks , which impacts cookie management and host name verification . This vulnerability was discovered by the Apache HttpClient team and has been addressed in the 5.4.3 release . No specific exploit details or in-th...

CVE-2026-40542

A missing critical step in the authentication process of Apache HttpClient 5.6 allows an attacker to bypass proper mutual authentication verification during SCRAM-SHA-256 authentication. This vulnerability affects several products, including IBM App Connect Enterprise (v13.0.1.0 - 13.0.7.2), Mong...