CVE-2026-107279 | AsyncHttpClient up to 3.0.12 Authentication Verification AuthenticatorUtils.computeExpectedRspAuth improper authentication

A vulnerability labeled as critical has been found in AsyncHttpClient up to 3.0.12. The impacted element is the function AuthenticatorUtils.computeExpectedRspAuth of the component Authentication Verification. Executing a manipulation can lead to improper authentication.

This vulnerability is registered as CVE-2026-107279. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More