CLSA-2026-1778152899 httpd: Fix of 2 CVEs

🗓️ 08 May 2026 11:42:44Reported by GoogleType

osv🔗 osv.dev👁 11 Views

Httpd fixes two vulnerabilities: out-of-bounds write for short accept-language header and htaccess bypass via regex anchor in Files and FilesMatch.

Reporter	Title	Published	Views	Family All 210
ALT Linux	Security fix for the ALT Linux 8 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server shipped with IBM Tivoli Security Policy Manager (CVE-2018-1301, CVE-2017-15715, CVE-2017-15710)	16 Jun 201822:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)	15 Jun 201807:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in apache2 affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201821:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in httpd affects IBM Integrated Analytics System	10 Nov 202011:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)	19 Feb 201917:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server affects Netezza Performance Portal	18 Oct 201903:36	–	ibm

Source	Link
errata	www.errata.tuxcare.com/els_os/centos6els/CLSA-2026-1778152899.html

01 Jun 2026 00:33Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.8

CVSS 38.1

EPSS0.86006