CVE-2026-107231 | AsyncHttpClient up to 2.16.0/3.0.12 Realm.Builder improper authentication

October 8, 2026 Yanac

A vulnerability identified as problematic has been detected in AsyncHttpClient up to 2.16.0/3.0.12. The affected element is an unknown function of the component Realm.Builder. Performing a manipulation results in improper authentication.

This vulnerability is cataloged as CVE-2026-107231. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More