CVE-2026-71290

criticalpriority · track · 0EPSS 0.003 · 26 %ileDEEUNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.33% (26th) EPSS

CVSS 9.1 · critical

Is it mine?

12 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · ncsc_nl

EPSS · scored 2026-10-27

Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain. Please note the classic version of HttpClient is not affected by this vulnerability. Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.3–9.1

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · ENISA EU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondaryexploitability 3.9 · impact 5.2

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-295USCWE-295US

affected products (12)

Products and version ranges known to be affected.

IBM App Connect Enterprise 13.0.1.0-13.0.8.1all versionscert_bundDEcpe:/a:ibm:app_connect_enterprise:13.0.1.0_-_13.0.8.1
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Apache Apache HttpComponents <5.6.4< 5.6.4cert_bundDE
Apache HttpComponents< 5.6.4cert_bundDE
Apache Software Foundation Apache HttpComponents Client≤ 5.4-alpha ≤5.6.3enisa_euvdEU
Oracle Oracle Communications≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Communications Cloud Native Core Console≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Communications MetaSolv Solution Module - ASR≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Communications Operations Monitor≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Communications Service Catalog and Design≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Communications Unified Assurance≤ vers:unknown/*ncsc_nlNL
apache httpclient5.4 → 5.6.4nvdUScpe:2.3:a:apache:httpclient:*:*:*:*:*:*:*:*

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0375Kwetsbaarheden verholpen in Oracle CommunicationsNL2026-09-16csaf · ncsc_nlNL
Oracle heeft 31 kwetsbaarheden verholpen in diverse Oracle Communications-producten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications MetaSolv Solution Module - ASR, Oracle Communications Service Catalog and Design en Oracle Communications Operations Monitor.
WID-SEC-W-2026-2782Apache HttpComponents: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2026-08-11csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
WID-SEC-W-2026-3403Oracle Communications: Mehrere SchwachstellenDeutsch2026-09-15csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2026-08-11modified 2026-10-24

references (4)

External citations — patches, advisories, analysis.

https://lists.apache.org/thread/bhf7g2zwpom2ohvwjjjlonc93br2s8vq cnnvd
https://lists.apache.org/thread/bhf7g2zwpom2ohvwjjjlonc93br2s8vq enisa_euvd
http://www.openwall.com/lists/oss-security/2026/08/13/6Mailing ListThird Party Advisorynvd
https://lists.apache.org/thread/bhf7g2zwpom2ohvwjjjlonc93br2s8vqMailing ListRelease Notesnvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan