Important: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-42535 affecting package httpd for versions less than 2.4.68-1

CVE-2026-42535 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-48913 affecting package httpd for versions less than 2.4.68-1

CVE-2026-48913 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-49975 affecting package httpd for versions less than 2.4.68-1

CVE-2026-49975 affecting package httpd for versions less than 2.4.68-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34355 affecting package httpd for versions less than 2.4.68-1

CVE-2026-34355 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-42536 affecting package httpd for versions less than 2.4.68-1

CVE-2026-42536 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-44185 affecting package httpd for versions less than 2.4.68-1

CVE-2026-44185 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-29167 affecting package httpd for versions less than 2.4.68-1

CVE-2026-29167 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-44186 affecting package httpd for versions less than 2.4.68-1

CVE-2026-44186 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-34356 affecting package httpd for versions less than 2.4.68-1

CVE-2026-34356 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-44631 affecting package httpd for versions less than 2.4.68-1

CVE-2026-44631 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

CVE-2026-29170 affecting package httpd for versions less than 2.4.68-1

CVE-2026-29170 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue

A flaw was found in the moddavfs module of Apache HTTP Server. A WebDAV Web Distributed Authoring and Versioning content author could exploit a path handling issue to directly manipulate trusted DAV property databases. This manipulation could potentially lead to child process crashes, resulting i...

FreeBSD : Apache httpd -- Multiple vulnerabilities (7655baae-637d-11f1-8607-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7655baae-637d-11f1-8607-8447094a420f advisory. The Apache httpd project reports: See links for details. Tenable has extracted the preceding...

CVE-2026-44119

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the...

CVE-2026-44119

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the...

Vulnerabilities present in IBM Aspera High-Speed Transfer Endpoint and Server

IBM has identified vulnerabilities in the IBM Aspera High-Speed Transfer Endpoint and Server versions 3.7.4 through 4.4.7 Fix Pack 1. These vulnerabilities reside in the asperahttpd component of the IBM Aspera High-Speed Transfer Endpoint and Server products. A buffer overflow can lead to...

RHEL 10 : mod_http2 (RHSA-2026:22528)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:22528 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: Apache HTTP...

CVE-2026-8259

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component httpd. The manipulation of the argument lan.ip leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-5962

A vulnerability was detected in Tenda CH22 1.0.0.6468. This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used...