By weakness (CWE)

CWE-1275: related vulnerabilities

CVEs classified under CWE-1275. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-55688MEDIUM 4.0

  AsyncHttpClient (AHC), a widely-used Java library for handling HTTP requests, contains a cookie injection vulnerability in versions 2.0.0–2.15.x and 3.0.0.Beta1–3.0.10. The flaw allows a malicious server to plant cookies intended for unrelated domains into the client's cookie store. When the affected application later communicates with the legitimate domain, it unwittingly sends the attacker-injected cookie. This attack succeeds only when a single AHC instance handles connections to both an attacker-controlled server and a trusted destination—a common pattern in applications that pool HTTP clients across multiple hosts.