CLEANSTART-2026-EC45528

    Dashboard / Vulnerabilities / CLEANSTART-2026-EC45528

    CLEANSTART-2026-EC45528

    Published: 10 Sept 2026Last Modified: 10 Sept 2026

    Summary: Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5

    Details: Multiple security vulnerabilities affect the apache-nifi package. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details.

    References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EC45528.json, https://osv.dev/vulnerability/CVE-2025-47911, https://osv.dev/vulnerability/CVE-2025-47912, https://osv.dev/vulnerability/CVE-2025-58183, https://osv.dev/vulnerability/CVE-2025-58185, https://osv.dev/vulnerability/CVE-2025-58186, https://osv.dev/vulnerability/CVE-2025-58187, https://osv.dev/vulnerability/CVE-2025-58188, https://osv.dev/vulnerability/CVE-2025-58189, https://osv.dev/vulnerability/CVE-2025-58190, https://osv.dev/vulnerability/CVE-2025-61723, https://osv.dev/vulnerability/CVE-2025-61724, https://osv.dev/vulnerability/CVE-2025-61725, https://osv.dev/vulnerability/CVE-2025-61726, https://osv.dev/vulnerability/CVE-2025-61727, https://osv.dev/vulnerability/CVE-2025-61728, https://osv.dev/vulnerability/CVE-2025-61729, https://osv.dev/vulnerability/CVE-2025-61730, https://osv.dev/vulnerability/CVE-2025-68121, https://osv.dev/vulnerability/CVE-2025-8671, https://osv.dev/vulnerability/CVE-2026-0636, https://osv.dev/vulnerability/CVE-2026-10050, https://osv.dev/vulnerability/CVE-2026-10051, https://osv.dev/vulnerability/CVE-2026-10532, https://osv.dev/vulnerability/CVE-2026-13006, https://osv.dev/vulnerability/CVE-2026-1605, https://osv.dev/vulnerability/CVE-2026-22732, https://osv.dev/vulnerability/CVE-2026-2332, https://osv.dev/vulnerability/CVE-2026-24281, https://osv.dev/vulnerability/CVE-2026-25679, https://osv.dev/vulnerability/CVE-2026-25680, https://osv.dev/vulnerability/CVE-2026-25681, https://osv.dev/vulnerability/CVE-2026-27136, https://osv.dev/vulnerability/CVE-2026-27139, https://osv.dev/vulnerability/CVE-2026-27142, https://osv.dev/vulnerability/CVE-2026-27145, https://osv.dev/vulnerability/CVE-2026-32280, https://osv.dev/vulnerability/CVE-2026-32281, https://osv.dev/vulnerability/CVE-2026-32282, https://osv.dev/vulnerability/CVE-2026-32283, https://osv.dev/vulnerability/CVE-2026-32288, https://osv.dev/vulnerability/CVE-2026-32289, https://osv.dev/vulnerability/CVE-2026-33186, https://osv.dev/vulnerability/CVE-2026-33811, https://osv.dev/vulnerability/CVE-2026-33814, https://osv.dev/vulnerability/CVE-2026-33870, https://osv.dev/vulnerability/CVE-2026-33871, https://osv.dev/vulnerability/CVE-2026-3505, https://osv.dev/vulnerability/CVE-2026-39820, https://osv.dev/vulnerability/CVE-2026-39821, https://osv.dev/vulnerability/CVE-2026-39822, https://osv.dev/vulnerability/CVE-2026-39823, https://osv.dev/vulnerability/CVE-2026-39824, https://osv.dev/vulnerability/CVE-2026-39825, https://osv.dev/vulnerability/CVE-2026-39826, https://osv.dev/vulnerability/CVE-2026-39836, https://osv.dev/vulnerability/CVE-2026-40983, https://osv.dev/vulnerability/CVE-2026-40984, https://osv.dev/vulnerability/CVE-2026-41707, https://osv.dev/vulnerability/CVE-2026-42499, https://osv.dev/vulnerability/CVE-2026-42502, https://osv.dev/vulnerability/CVE-2026-42504, https://osv.dev/vulnerability/CVE-2026-42505, https://osv.dev/vulnerability/CVE-2026-42506, https://osv.dev/vulnerability/CVE-2026-42507, https://osv.dev/vulnerability/CVE-2026-46600, https://osv.dev/vulnerability/CVE-2026-47842, https://osv.dev/vulnerability/CVE-2026-47843, https://osv.dev/vulnerability/CVE-2026-47845, https://osv.dev/vulnerability/CVE-2026-47848, https://osv.dev/vulnerability/CVE-2026-47856, https://osv.dev/vulnerability/CVE-2026-47874, https://osv.dev/vulnerability/CVE-2026-47885, https://osv.dev/vulnerability/CVE-2026-47886, https://osv.dev/vulnerability/CVE-2026-47888, https://osv.dev/vulnerability/CVE-2026-47889, https://osv.dev/vulnerability/CVE-2026-54399, https://osv.dev/vulnerability/CVE-2026-54428, https://osv.dev/vulnerability/CVE-2026-54512, https://osv.dev/vulnerability/CVE-2026-54513, https://osv.dev/vulnerability/CVE-2026-54514, https://osv.dev/vulnerability/CVE-2026-54515, https://osv.dev/vulnerability/CVE-2026-54516, https://osv.dev/vulnerability/CVE-2026-54517, https://osv.dev/vulnerability/CVE-2026-54518, https://osv.dev/vulnerability/CVE-2026-55831, https://osv.dev/vulnerability/CVE-2026-55833, https://osv.dev/vulnerability/CVE-2026-5588, https://osv.dev/vulnerability/CVE-2026-56624, https://osv.dev/vulnerability/CVE-2026-56745, https://osv.dev/vulnerability/CVE-2026-56746, https://osv.dev/vulnerability/CVE-2026-56819, https://osv.dev/vulnerability/CVE-2026-56852, https://osv.dev/vulnerability/CVE-2026-59270, https://osv.dev/vulnerability/CVE-2026-59276, https://osv.dev/vulnerability/CVE-2026-59277, https://osv.dev/vulnerability/CVE-2026-59280, https://osv.dev/vulnerability/CVE-2026-59281, https://osv.dev/vulnerability/CVE-2026-59282, https://osv.dev/vulnerability/CVE-2026-59283, https://osv.dev/vulnerability/CVE-2026-59292, https://osv.dev/vulnerability/CVE-2026-59296, https://osv.dev/vulnerability/CVE-2026-59888, https://osv.dev/vulnerability/CVE-2026-59889, https://osv.dev/vulnerability/CVE-2026-59898, https://osv.dev/vulnerability/CVE-2026-59899, https://osv.dev/vulnerability/CVE-2026-59900, https://osv.dev/vulnerability/CVE-2026-59901, https://osv.dev/vulnerability/CVE-2026-59921, https://osv.dev/vulnerability/CVE-2026-59949, https://osv.dev/vulnerability/CVE-2026-64607, https://osv.dev/vulnerability/CVE-2026-6790, https://osv.dev/vulnerability/CVE-2026-71290, https://osv.dev/vulnerability/CVE-2026-8384, https://osv.dev/vulnerability/CVE-2026-9828, https://osv.dev/vulnerability/ghsa-355h-qmc2-wpwf, https://osv.dev/vulnerability/ghsa-3677-xxcr-wjqv, https://osv.dev/vulnerability/ghsa-38f8-5428-x5cv, https://osv.dev/vulnerability/ghsa-3qp7-7mw8-wx86, https://osv.dev/vulnerability/ghsa-45q3-82m4-75jr, https://osv.dev/vulnerability/ghsa-563q-j3cm-6jxm, https://osv.dev/vulnerability/ghsa-57rv-r2g8-2cj3, https://osv.dev/vulnerability/ghsa-5pvg-856g-cp85, https://osv.dev/vulnerability/ghsa-5x3r-wrvg-rp6q, https://osv.dev/vulnerability/ghsa-676x-f7gg-47vc, https://osv.dev/vulnerability/ghsa-72hv-8253-57qq, https://osv.dev/vulnerability/ghsa-c2gf-v879-257j, https://osv.dev/vulnerability/ghsa-c3fc-8qff-9hwx, https://osv.dev/vulnerability/ghsa-c653-97m9-rcg9, https://osv.dev/vulnerability/ghsa-cj8j-37rh-8475, https://osv.dev/vulnerability/ghsa-cm33-6792-r9fm, https://osv.dev/vulnerability/ghsa-cmm3-54f8-px4j, https://osv.dev/vulnerability/ghsa-cq4q-cv5g-r8q5, https://osv.dev/vulnerability/ghsa-cvc6-q2cp-2xhw, https://osv.dev/vulnerability/ghsa-f6hv-jmp6-3vwv, https://osv.dev/vulnerability/ghsa-hrxh-6v49-42gf, https://osv.dev/vulnerability/ghsa-hvcg-qmg6-jm4c, https://osv.dev/vulnerability/ghsa-m4cv-j2px-7723, https://osv.dev/vulnerability/ghsa-mhm7-754m-9p8w, https://osv.dev/vulnerability/ghsa-mj4r-2hfc-f8p6, https://osv.dev/vulnerability/ghsa-qqpg-mvqg-649v, https://osv.dev/vulnerability/ghsa-r7wm-3cxj-wff9, https://osv.dev/vulnerability/ghsa-rwm7-x88c-3g2p, https://osv.dev/vulnerability/ghsa-v8h7-rr48-vmmv, https://osv.dev/vulnerability/ghsa-vxf7-qj7q-83fh, https://osv.dev/vulnerability/ghsa-w573-9ffj-6ff9, https://osv.dev/vulnerability/ghsa-wg6q-6289-32hp, https://osv.dev/vulnerability/ghsa-x2wq-9x2f-fhj7, https://osv.dev/vulnerability/ghsa-x44p-gvrj-pj2r, https://osv.dev/vulnerability/ghsa-x4gw-5cx5-pgmh, https://osv.dev/vulnerability/ghsa-xmv7-r254-6q78, https://osv.dev/vulnerability/ghsa-xxqh-mfjm-7mv9, https://nvd.nist.gov/vuln/detail/CVE-2025-47911, https://nvd.nist.gov/vuln/detail/CVE-2025-47912, https://nvd.nist.gov/vuln/detail/CVE-2025-58183, https://nvd.nist.gov/vuln/detail/CVE-2025-58185, https://nvd.nist.gov/vuln/detail/CVE-2025-58186, https://nvd.nist.gov/vuln/detail/CVE-2025-58187, https://nvd.nist.gov/vuln/detail/CVE-2025-58188, https://nvd.nist.gov/vuln/detail/CVE-2025-58189, https://nvd.nist.gov/vuln/detail/CVE-2025-58190, https://nvd.nist.gov/vuln/detail/CVE-2025-61723, https://nvd.nist.gov/vuln/detail/CVE-2025-61724, https://nvd.nist.gov/vuln/detail/CVE-2025-61725, https://nvd.nist.gov/vuln/detail/CVE-2025-61726, https://nvd.nist.gov/vuln/detail/CVE-2025-61727, https://nvd.nist.gov/vuln/detail/CVE-2025-61728, https://nvd.nist.gov/vuln/detail/CVE-2025-61729, https://nvd.nist.gov/vuln/detail/CVE-2025-61730, https://nvd.nist.gov/vuln/detail/CVE-2025-68121, https://nvd.nist.gov/vuln/detail/CVE-2025-8671, https://nvd.nist.gov/vuln/detail/CVE-2026-0636, https://nvd.nist.gov/vuln/detail/CVE-2026-10050, https://nvd.nist.gov/vuln/detail/CVE-2026-10051, https://nvd.nist.gov/vuln/detail/CVE-2026-10532, https://nvd.nist.gov/vuln/detail/CVE-2026-13006, https://nvd.nist.gov/vuln/detail/CVE-2026-1605, https://nvd.nist.gov/vuln/detail/CVE-2026-22732, https://nvd.nist.gov/vuln/detail/CVE-2026-2332, https://nvd.nist.gov/vuln/detail/CVE-2026-24281, https://nvd.nist.gov/vuln/detail/CVE-2026-25679, https://nvd.nist.gov/vuln/detail/CVE-2026-25680, https://nvd.nist.gov/vuln/detail/CVE-2026-25681, https://nvd.nist.gov/vuln/detail/CVE-2026-27136, https://nvd.nist.gov/vuln/detail/CVE-2026-27139, https://nvd.nist.gov/vuln/detail/CVE-2026-27142, https://nvd.nist.gov/vuln/detail/CVE-2026-27145, https://nvd.nist.gov/vuln/detail/CVE-2026-32280, https://nvd.nist.gov/vuln/detail/CVE-2026-32281, https://nvd.nist.gov/vuln/detail/CVE-2026-32282, https://nvd.nist.gov/vuln/detail/CVE-2026-32283, https://nvd.nist.gov/vuln/detail/CVE-2026-32288, https://nvd.nist.gov/vuln/detail/CVE-2026-32289, https://nvd.nist.gov/vuln/detail/CVE-2026-33186, https://nvd.nist.gov/vuln/detail/CVE-2026-33811, https://nvd.nist.gov/vuln/detail/CVE-2026-33814, https://nvd.nist.gov/vuln/detail/CVE-2026-33870, https://nvd.nist.gov/vuln/detail/CVE-2026-33871, https://nvd.nist.gov/vuln/detail/CVE-2026-3505, https://nvd.nist.gov/vuln/detail/CVE-2026-39820, https://nvd.nist.gov/vuln/detail/CVE-2026-39821, https://nvd.nist.gov/vuln/detail/CVE-2026-39822, https://nvd.nist.gov/vuln/detail/CVE-2026-39823, https://nvd.nist.gov/vuln/detail/CVE-2026-39824, https://nvd.nist.gov/vuln/detail/CVE-2026-39825, https://nvd.nist.gov/vuln/detail/CVE-2026-39826, https://nvd.nist.gov/vuln/detail/CVE-2026-39836, https://nvd.nist.gov/vuln/detail/CVE-2026-40983, https://nvd.nist.gov/vuln/detail/CVE-2026-40984, https://nvd.nist.gov/vuln/detail/CVE-2026-41707, https://nvd.nist.gov/vuln/detail/CVE-2026-42499, https://nvd.nist.gov/vuln/detail/CVE-2026-42502, https://nvd.nist.gov/vuln/detail/CVE-2026-42504, https://nvd.nist.gov/vuln/detail/CVE-2026-42505, https://nvd.nist.gov/vuln/detail/CVE-2026-42506, https://nvd.nist.gov/vuln/detail/CVE-2026-42507, https://nvd.nist.gov/vuln/detail/CVE-2026-46600, https://nvd.nist.gov/vuln/detail/CVE-2026-47842, https://nvd.nist.gov/vuln/detail/CVE-2026-47843, https://nvd.nist.gov/vuln/detail/CVE-2026-47845, https://nvd.nist.gov/vuln/detail/CVE-2026-47848, https://nvd.nist.gov/vuln/detail/CVE-2026-47856, https://nvd.nist.gov/vuln/detail/CVE-2026-47874, https://nvd.nist.gov/vuln/detail/CVE-2026-47885, https://nvd.nist.gov/vuln/detail/CVE-2026-47886, https://nvd.nist.gov/vuln/detail/CVE-2026-47888, https://nvd.nist.gov/vuln/detail/CVE-2026-47889, https://nvd.nist.gov/vuln/detail/CVE-2026-54399, https://nvd.nist.gov/vuln/detail/CVE-2026-54428, https://nvd.nist.gov/vuln/detail/CVE-2026-54512, https://nvd.nist.gov/vuln/detail/CVE-2026-54513, https://nvd.nist.gov/vuln/detail/CVE-2026-54514, https://nvd.nist.gov/vuln/detail/CVE-2026-54515, https://nvd.nist.gov/vuln/detail/CVE-2026-54516, https://nvd.nist.gov/vuln/detail/CVE-2026-54517, https://nvd.nist.gov/vuln/detail/CVE-2026-54518, https://nvd.nist.gov/vuln/detail/CVE-2026-55831, https://nvd.nist.gov/vuln/detail/CVE-2026-55833, https://nvd.nist.gov/vuln/detail/CVE-2026-5588, https://nvd.nist.gov/vuln/detail/CVE-2026-56624, https://nvd.nist.gov/vuln/detail/CVE-2026-56745, https://nvd.nist.gov/vuln/detail/CVE-2026-56746, https://nvd.nist.gov/vuln/detail/CVE-2026-56819, https://nvd.nist.gov/vuln/detail/CVE-2026-56852, https://nvd.nist.gov/vuln/detail/CVE-2026-59270, https://nvd.nist.gov/vuln/detail/CVE-2026-59276, https://nvd.nist.gov/vuln/detail/CVE-2026-59277, https://nvd.nist.gov/vuln/detail/CVE-2026-59280, https://nvd.nist.gov/vuln/detail/CVE-2026-59281, https://nvd.nist.gov/vuln/detail/CVE-2026-59282, https://nvd.nist.gov/vuln/detail/CVE-2026-59283, https://nvd.nist.gov/vuln/detail/CVE-2026-59292, https://nvd.nist.gov/vuln/detail/CVE-2026-59296, https://nvd.nist.gov/vuln/detail/CVE-2026-59888, https://nvd.nist.gov/vuln/detail/CVE-2026-59889, https://nvd.nist.gov/vuln/detail/CVE-2026-59898, https://nvd.nist.gov/vuln/detail/CVE-2026-59899, https://nvd.nist.gov/vuln/detail/CVE-2026-59900, https://nvd.nist.gov/vuln/detail/CVE-2026-59901, https://nvd.nist.gov/vuln/detail/CVE-2026-59921, https://nvd.nist.gov/vuln/detail/CVE-2026-59949, https://nvd.nist.gov/vuln/detail/CVE-2026-64607, https://nvd.nist.gov/vuln/detail/CVE-2026-6790, https://nvd.nist.gov/vuln/detail/CVE-2026-71290, https://nvd.nist.gov/vuln/detail/CVE-2026-8384, https://nvd.nist.gov/vuln/detail/CVE-2026-9828

    Affected packages

    Package

    Name: apache-nifi

    Purl:

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.9.0-r1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CLEANSTART-2026-EC45528 | CVE-DB