CLSA-2026-1791857131 httpd: Fix of CVE-2026-44185

CVE-2026-44185: modssl: fix buffer over-read in OCSP sendrequest - advance the write pointer by the number of bytes actually sent...

CLSA-2026-1791855215 httpd: Fix of CVE-2026-44185

CVE-2026-44185: modssl: fix buffer over-read in OCSP sendrequest - advance the write pointer by the number of bytes actually sent...

CLSA-2026-1791854750 httpd: Fix of CVE-2026-44185

CVE-2026-44185: modssl: fix buffer over-read in OCSP sendrequest - advance the write pointer by the number of bytes actually sent...

PT-2026-111735

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description A flaw in the httpd web server allows for a user existence oracle when system password authentication is enabled. This occurs in specific build configurations or uncommon password file states...

PT-2026-122251

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-88834: Observable Discrepancy

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

BusyBox side-channel information leakage vulnerability

BusyBox has a vulnerability related to side-channel information leakage. This vulnerability arises from the httpd web server’s configuration system for password authentication. In certain configurations, there may be issues with determining the existence of users. Attackers can observe the failur...

CVE-2026-63686 affecting package httpd for versions less than 2.4.69-1

CVE-2026-63686 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59685 affecting package httpd for versions less than 2.4.69-1

CVE-2026-59685 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-48005 affecting package httpd for versions less than 2.4.69-1

CVE-2026-48005 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1

CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56449 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56449 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-79768 affecting package httpd for versions less than 2.4.69-1

CVE-2026-79768 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-58415 affecting package httpd for versions less than 2.4.69-1

CVE-2026-58415 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-47360 affecting package httpd for versions less than 2.4.69-1

CVE-2026-47360 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42356 affecting package httpd for versions less than 2.4.69-1

CVE-2026-42356 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42528 affecting package httpd for versions less than 2.4.69-1

CVE-2026-42528 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1

CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...