CLSA-2026-1779091399 httpd: Fix of 8 CVEs

🗓️ 18 May 2026 08:03:28Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Eight httpd CVEs fixed: htaccess restriction, NULL pointers, nonce check, status validation, and ajp fixes.

Reporter	Title	Published	Views	Family All 370
FreeBSD	www/apache24 -- Multiple vulnerabilities	4 May 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, CVE-2026-33523, CVE-2026-41080, CVE-2026-33857, CVE-2026-34032]	22 May 202605:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities	11 May 202622:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	18 May 202615:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within IBM HTTP Server, affect IBM Tivoli Monitoring.	8 Jun 202616:44	–	ibm
GithubExploit	Exploit for Improper Privilege Management in Apache Http_Server	5 May 202618:48	–	githubexploit
GithubExploit	Exploit for Observable Timing Discrepancy in Apache Http_Server	8 May 202618:28	–	githubexploit
ATTACKERKB	CVE-2026-34032	4 May 202612:54	–	attackerkb
ATTACKERKB	CVE-2026-33006	4 May 202614:42	–	attackerkb
ATTACKERKB	CVE-2026-33523	4 May 202614:40	–	attackerkb