CVE-2026-107283 | async-http-client up to 2.16.0/3.0.11 Realm.Builder random values

October 8, 2026 Yanac

A vulnerability was found in async-http-client up to 2.16.0/3.0.11 and classified as problematic. This issue affects the function Realm.Builder. The manipulation results in insufficiently random values.

This vulnerability was named CVE-2026-107283. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More