{"schema":"vulnpedia.research/1","cve":"CVE-2026-107279","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-qhv6-3pmh-95q4","tags":["x_refsource_CONFIRM","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-07T21:10:51.519Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-07T21:10:51.519Z","url":"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-qhv6-3pmh-95q4"},{"source":"nvd","sourceId":"CVE-2026-107279","modified":"2026-10-08T20:35:31.200","url":"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-qhv6-3pmh-95q4"},{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-qhv6-3pmh-95q4"}]},{"url":"https://github.com/AsyncHttpClient/async-http-client/commit/a5422493b638226666a1ecb5f82826c7c7845b99","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-07T21:10:51.519Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-07T21:10:51.519Z","url":"https://github.com/AsyncHttpClient/async-http-client/commit/a5422493b638226666a1ecb5f82826c7c7845b99"},{"source":"nvd","sourceId":"CVE-2026-107279","modified":"2026-10-08T20:35:31.200","url":"https://github.com/AsyncHttpClient/async-http-client/commit/a5422493b638226666a1ecb5f82826c7c7845b99"},{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://github.com/AsyncHttpClient/async-http-client/commit/a5422493b638226666a1ecb5f82826c7c7845b99"}]},{"url":"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-3.0.13","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-07T21:10:51.519Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-07T21:10:51.519Z","url":"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-3.0.13"},{"source":"nvd","sourceId":"CVE-2026-107279","modified":"2026-10-08T20:35:31.200","url":"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-3.0.13"},{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-3.0.13"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-107279.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-107279.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107279","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-107279"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547726","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547726"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107279","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-107279"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107279","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107279"}]},{"source":"euvd","sourceId":"EUVD-2026-94638","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94638","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-94638","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94638"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-107279.json","productId":"red_hat_fuse_7:async-http-client","product":"async-http-client as a component of Red Hat Fuse 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_in_execute_path","purl":"pkg:maven/org.asynchttpclient/async-http-client@2.6.0","origins":[{"source":"redhat","sourceId":"CVE-2026-107279","modified":"2026-10-13T09:11:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-107279.json"}]}],"vendorCoverage":{"total":1,"shown":1,"omitted":0,"source":"redhat"}}