High 2 vendors · 2 advisories

CVE-2026-40542

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache1 advisory

High7.3Apache HttpClient: Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCR…Apr 22, 2026

Linux1 advisory

High7.3Authentication bypass due to missing mutual authentication verificationApr 22, 2026