CVE-2026-28780

🗓️ 05 May 2026 21:29:41Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 462 Views

Buffer overflow in mod_proxy_ajp of Apache HTTP Server from malicious AJP server; fixed in version 2.4.67.

Reporter	Title	Published	Views	Family All 120
FreeBSD	www/apache24 -- Multiple vulnerabilities	4 May 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, CVE-2026-33523, CVE-2026-41080, CVE-2026-33857, CVE-2026-34032]	22 May 202605:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities	11 May 202622:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	18 May 202615:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within IBM HTTP Server, affect IBM Tivoli Monitoring.	8 Jun 202616:44	–	ibm
ATTACKERKB	CVE-2026-28780	5 May 202621:29	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-1720)	26 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd, --advisory ALAS2-2026-3314 (ALAS-2026-3314)	27 May 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : httpd (ALSA-2026:21391)	29 May 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : httpd (ALSA-2026:21433)	28 May 202600:00	–	nessus

NVD

Vulners

Node

apache http_serverRange<2.4.67

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.66",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
openwall	www.openwall.com/lists/oss-security/2026/05/05/9

17 Jun 2026 10:29Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.00663

SSVC

CWE-122