KLA91019 Multiple vulnerabilities in Apache HTTP Server

🗓️ 04 May 2026 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 43 Views

Multiple Apache HTTP Server vulnerabilities allow denial of service and remote code execution.

Reporter	Title	Published	Views	Family All 825
FreeBSD	www/apache24 -- Multiple vulnerabilities	4 May 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, CVE-2026-33523, CVE-2026-41080, CVE-2026-33857, CVE-2026-34032]	22 May 202605:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities	11 May 202622:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	18 May 202615:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within IBM HTTP Server, affect IBM Tivoli Monitoring.	8 Jun 202616:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in xorg-x11-server, mod_http2, httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries affect Power HMC.	29 Oct 202610:08	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	13 Aug 202615:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System	1 Oct 202610:18	–	ibm
GithubExploit	Exploit for Double Free in Apache Http_Server	5 May 202613:44	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Apache Http_Server	5 May 202618:48	–	githubexploit

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
threats	www.threats.kaspersky.com/en/product/Apache-HTTP-Server/
statistics	www.statistics.securelist.com/

27 Aug 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8

EPSS0.49727

SSVC

Apache HTTP Server denial of service remote code execution buffer overread timing attack response splitting privilege escalation null pointer dereference heap overflow mod proxy ajp mod auth digest