CWE-757 (CWE-757) — 3 disclosed vulnerabilities

Records the NVD classes under CWE-757, highest CVSS first.

UNSCOREDCVE-2026-107279public PoC2026-10-07
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In 3.0.12, a peer offering only Digest qop=auth-int causes mutual-authentication verification to be skipped. AuthenticatorUtil…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-107231public PoC2026-10-07
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, Realm.Builder treats a Digest challenge that yields no usable nonce as a Basic challenge. A malici…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-1025082026-09-30
Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J) allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify s…
AI risk analysis on Exploit-DB.ai →