CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-54399

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 32.9%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2026-54399

Apache » Httpcomponents Core » Version: 4.0

cpe:2.3:a:apache:httpcomponents_core:4.0
Apache » Httpcomponents Core » Version: 4.0.1

cpe:2.3:a:apache:httpcomponents_core:4.0.1
Apache » Httpcomponents Core » Version: 4.1

cpe:2.3:a:apache:httpcomponents_core:4.1
Apache » Httpcomponents Core » Version: 4.1.1

cpe:2.3:a:apache:httpcomponents_core:4.1.1
Apache » Httpcomponents Core » Version: 4.1.2

cpe:2.3:a:apache:httpcomponents_core:4.1.2
Apache » Httpcomponents Core » Version: 4.1.3

cpe:2.3:a:apache:httpcomponents_core:4.1.3
Apache » Httpcomponents Core » Version: 4.1.4

cpe:2.3:a:apache:httpcomponents_core:4.1.4
Apache » Httpcomponents Core » Version: 4.2

cpe:2.3:a:apache:httpcomponents_core:4.2
Apache » Httpcomponents Core » Version: 4.2.1

cpe:2.3:a:apache:httpcomponents_core:4.2.1
Apache » Httpcomponents Core » Version: 4.2.2

cpe:2.3:a:apache:httpcomponents_core:4.2.2
Apache » Httpcomponents Core » Version: 4.2.3

cpe:2.3:a:apache:httpcomponents_core:4.2.3
Apache » Httpcomponents Core » Version: 4.2.4

cpe:2.3:a:apache:httpcomponents_core:4.2.4
Apache » Httpcomponents Core » Version: 4.2.5

cpe:2.3:a:apache:httpcomponents_core:4.2.5
Apache » Httpcomponents Core » Version: 4.3

cpe:2.3:a:apache:httpcomponents_core:4.3
Apache » Httpcomponents Core » Version: 4.3.1

cpe:2.3:a:apache:httpcomponents_core:4.3.1
Apache » Httpcomponents Core » Version: 4.3.2

cpe:2.3:a:apache:httpcomponents_core:4.3.2
Apache » Httpcomponents Core » Version: 4.3.3

cpe:2.3:a:apache:httpcomponents_core:4.3.3
Apache » Httpcomponents Core » Version: 4.4

cpe:2.3:a:apache:httpcomponents_core:4.4
Apache » Httpcomponents Core » Version: 4.4.1

cpe:2.3:a:apache:httpcomponents_core:4.4.1
Apache » Httpcomponents Core » Version: 4.4.10

cpe:2.3:a:apache:httpcomponents_core:4.4.10
Apache » Httpcomponents Core » Version: 4.4.11

cpe:2.3:a:apache:httpcomponents_core:4.4.11
Apache » Httpcomponents Core » Version: 4.4.12

cpe:2.3:a:apache:httpcomponents_core:4.4.12
Apache » Httpcomponents Core » Version: 4.4.13

cpe:2.3:a:apache:httpcomponents_core:4.4.13
Apache » Httpcomponents Core » Version: 4.4.14

cpe:2.3:a:apache:httpcomponents_core:4.4.14
Apache » Httpcomponents Core » Version: 4.4.15

cpe:2.3:a:apache:httpcomponents_core:4.4.15
Apache » Httpcomponents Core » Version: 4.4.16

cpe:2.3:a:apache:httpcomponents_core:4.4.16
Apache » Httpcomponents Core » Version: 4.4.2

cpe:2.3:a:apache:httpcomponents_core:4.4.2
Apache » Httpcomponents Core » Version: 4.4.3

cpe:2.3:a:apache:httpcomponents_core:4.4.3
Apache » Httpcomponents Core » Version: 4.4.4

cpe:2.3:a:apache:httpcomponents_core:4.4.4
Apache » Httpcomponents Core » Version: 4.4.5

cpe:2.3:a:apache:httpcomponents_core:4.4.5
Apache » Httpcomponents Core » Version: 4.4.6

cpe:2.3:a:apache:httpcomponents_core:4.4.6
Apache » Httpcomponents Core » Version: 4.4.7

cpe:2.3:a:apache:httpcomponents_core:4.4.7
Apache » Httpcomponents Core » Version: 4.4.8

cpe:2.3:a:apache:httpcomponents_core:4.4.8
Apache » Httpcomponents Core » Version: 4.4.9

cpe:2.3:a:apache:httpcomponents_core:4.4.9
Apache » Httpcomponents Core » Version: 5.0

cpe:2.3:a:apache:httpcomponents_core:5.0
Apache » Httpcomponents Core » Version: 5.0.1

cpe:2.3:a:apache:httpcomponents_core:5.0.1
Apache » Httpcomponents Core » Version: 5.0.2

cpe:2.3:a:apache:httpcomponents_core:5.0.2
Apache » Httpcomponents Core » Version: 5.0.3

cpe:2.3:a:apache:httpcomponents_core:5.0.3
Apache » Httpcomponents Core » Version: 5.0.4

cpe:2.3:a:apache:httpcomponents_core:5.0.4
Apache » Httpcomponents Core » Version: 5.1

cpe:2.3:a:apache:httpcomponents_core:5.1
Apache » Httpcomponents Core » Version: 5.1.1

cpe:2.3:a:apache:httpcomponents_core:5.1.1
Apache » Httpcomponents Core » Version: 5.1.2

cpe:2.3:a:apache:httpcomponents_core:5.1.2
Apache » Httpcomponents Core » Version: 5.1.3

cpe:2.3:a:apache:httpcomponents_core:5.1.3
Apache » Httpcomponents Core » Version: 5.1.4

cpe:2.3:a:apache:httpcomponents_core:5.1.4
Apache » Httpcomponents Core » Version: 5.1.5

cpe:2.3:a:apache:httpcomponents_core:5.1.5
Apache » Httpcomponents Core » Version: 5.2

cpe:2.3:a:apache:httpcomponents_core:5.2
Apache » Httpcomponents Core » Version: 5.2.1

cpe:2.3:a:apache:httpcomponents_core:5.2.1
Apache » Httpcomponents Core » Version: 5.2.2

cpe:2.3:a:apache:httpcomponents_core:5.2.2
Apache » Httpcomponents Core » Version: 5.2.3

cpe:2.3:a:apache:httpcomponents_core:5.2.3
Apache » Httpcomponents Core » Version: 5.2.4

cpe:2.3:a:apache:httpcomponents_core:5.2.4
Apache » Httpcomponents Core » Version: 5.2.5

cpe:2.3:a:apache:httpcomponents_core:5.2.5
Apache » Httpcomponents Core » Version: 5.3

cpe:2.3:a:apache:httpcomponents_core:5.3
Apache » Httpcomponents Core » Version: 5.3.1

cpe:2.3:a:apache:httpcomponents_core:5.3.1
Apache » Httpcomponents Core » Version: 5.3.2

cpe:2.3:a:apache:httpcomponents_core:5.3.2
Apache » Httpcomponents Core » Version: 5.3.3

cpe:2.3:a:apache:httpcomponents_core:5.3.3
Apache » Httpcomponents Core » Version: 5.3.4

cpe:2.3:a:apache:httpcomponents_core:5.3.4
Apache » Httpcomponents Core » Version: 5.3.5

cpe:2.3:a:apache:httpcomponents_core:5.3.5
Apache » Httpcomponents Core » Version: 5.3.6

cpe:2.3:a:apache:httpcomponents_core:5.3.6
Apache » Httpcomponents Core » Version: 5.4

cpe:2.3:a:apache:httpcomponents_core:5.4
Apache » Httpcomponents Core » Version: 5.4.1

cpe:2.3:a:apache:httpcomponents_core:5.4.1
Apache » Httpcomponents Core » Version: 5.4.2

cpe:2.3:a:apache:httpcomponents_core:5.4.2
Apache » Httpcomponents Core » Version: 5.5

cpe:2.3:a:apache:httpcomponents_core:5.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-54399

Products

Pricing

Contact Us