CVE-2026-73116

Vendor

Apache Software Foundation

Product

Apache Juneau

CVSS v4.0

10.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-522

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 38
   CVE NVD 2h ago

   Insufficiently Protected Credentials vulnerability in Apache Juneau.

   Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a…

   CVSS 10.0 Fix available CVE-2026-73116 Apache Software Foundation