CLSA-2026-1791875122 httpd: Fix of CVE-2026-63686

CVE-2026-63686: modxml2enc: NULL pointer dereference on charset conversion failure...

CLSA-2026-1791857131 httpd: Fix of CVE-2026-44185

CVE-2026-44185: modssl: fix buffer over-read in OCSP sendrequest - advance the write pointer by the number of bytes actually sent...

CLSA-2026-1791855215 httpd: Fix of CVE-2026-44185

CVE-2026-44185: modssl: fix buffer over-read in OCSP sendrequest - advance the write pointer by the number of bytes actually sent...

CLSA-2026-1791854750 httpd: Fix of CVE-2026-44185

CVE-2026-44185: modssl: fix buffer over-read in OCSP sendrequest - advance the write pointer by the number of bytes actually sent...

PT-2026-111735

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description A flaw in the httpd web server allows for a user existence oracle when system password authentication is enabled. This occurs in specific build configurations or uncommon password file states...

CVE-2026-88834: Observable Discrepancy

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

PT-2026-122251

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

BusyBox side-channel information leakage vulnerability

BusyBox has a vulnerability related to side-channel information leakage. This vulnerability arises from the httpd web server’s configuration system for password authentication. In certain configurations, there may be issues with determining the existence of users. Attackers can observe the failur...

CVE-2026-63045 affecting package httpd for versions less than 2.4.69-1

CVE-2026-63045 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-47360 affecting package httpd for versions less than 2.4.69-1

CVE-2026-47360 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1

CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63686 affecting package httpd for versions less than 2.4.69-1

CVE-2026-63686 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56449 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56449 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73637 affecting package httpd for versions less than 2.4.69-1

CVE-2026-73637 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59797 affecting package httpd for versions less than 2.4.69-1

CVE-2026-59797 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-79768 affecting package httpd for versions less than 2.4.69-1

CVE-2026-79768 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42528 affecting package httpd for versions less than 2.4.69-1

CVE-2026-42528 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59685 affecting package httpd for versions less than 2.4.69-1

CVE-2026-59685 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...