Linux Distros Unpatched Vulnerability : CVE-2026-63686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to...

Linux Distros Unpatched Vulnerability : CVE-2026-56153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. CVE-2026-56153 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-63292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-58415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote...

Linux Distros Unpatched Vulnerability : CVE-2026-63045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward...

Linux Distros Unpatched Vulnerability : CVE-2026-42356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and...

Linux Distros Unpatched Vulnerability : CVE-2026-46729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-56153

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-63718

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...

Linux Distros Unpatched Vulnerability : CVE-2026-48005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote...

Linux Distros Unpatched Vulnerability : CVE-2026-59797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Privilege Management vulnerability in Apache HTTP Server's modssl via SSLRequire and file- related expressions. This issue affects Apache HTTP Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-56449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0...

Linux Distros Unpatched Vulnerability : CVE-2026-73637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause...

Linux Distros Unpatched Vulnerability : CVE-2026-57941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free vulnerability in Apache HTTP Server's modhttp2 via shared session-bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through...

Linux Distros Unpatched Vulnerability : CVE-2026-79768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directiv...

Linux Distros Unpatched Vulnerability : CVE-2026-93546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...

Detections-CVE-2026-23918

이동 예정: https://github.com/insomnisec/publiccvedetections 탐지 게시물의 장기적인 관리를 위해 이 저장소는 2026년 6월에 제거됩니다 앞으로는 다른 저장소를 사용해 주세요 CVE-2026-23918 "Apache HTTP/2 Double-Free" — 탐지 및 대응 패키지 게시일: 2026-05-04 CVSSv3: 8.8 높음 유형: 원격 코드 실행 / 서비스 거부 Double-Free 메모리 손상 구성 요소: Apache HTTP Server modhttp2 h2mplx.c 스트림...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 경로 탐색 / 원격 코드 실행 교육 연구 프로젝트입니다. 모든 테스트는 격리된 Docker 랩에서 수행되었습니다. 소유하지 않은 시스템에 대해 사용하지 마십시오. 취약점 요약 필드| 세부 정보 ---|--- CVE ID| CVE-2021-41773 영향받는 소프트웨어| Apache HTTP Server 2.4.49만 취약점 유형| 경로 탐색 → 원격 코드 실행 CVSS 점수| 9.8 심각 공개일| 2021년 10월 수정 버전| Apache 2.4.51...

Apache-CVE-2026-23918-fix

Apache HTTP Server: http2: 早期リセット時のダブルフリーとRCEの可能性 CVE-2026-23918。Apache HTTP ServerのHTTP/2プロトコルにおけるダブルフリーとRCEの可能性がある脆弱性。 この問題はApache HTTP Server: 2.4.66に影響します。 ユーザーは、この問題を修正したバージョン2.4.67にアップグレードすることを推奨します。...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ 针对 Apache HTTP/2 双重释放漏洞的专业情报与侦察工具。 📌 概述 CVE-2026-23918 （CVSS 8.8）是 Apache HTTP Server 2.4.66 中的一个严重内存损坏缺陷。该审计工具旨在安全地对目标进行指纹识别并评估风险暴露程度，尤其适用于版本字符串被混淆或被 WAF 屏蔽的环境。 🚀 主要特性 特性| 描述 ---|--- ALPN 协议强制| 强制进行 HTTP/2 握手以验证引擎激活状态 WAF/代理绕过| 针对直接源 IP 审计进行优化，以绕过...