CLEANSTART-2026-PA56152 In Apache HTTP Server 2

Security vulnerability affects the apache2 package. In Apache HTTP Server 2...

CLEANSTART-2026-XE02231 Some mod_proxy configurations on Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Some modproxy configurations on Apache HTTP Server versions 2...

CLEANSTART-2026-JK21157 Apache HTTP Server 2

Security vulnerability affects the apache2 package. Apache HTTP Server 2...

CLEANSTART-2026-RK78285 Apache HTTP Server 2

Security vulnerability affects the apache2 package. Apache HTTP Server 2...

CLEANSTART-2026-TS50001 attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server

Security vulnerability affects the apache2 package. An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server...

CLEANSTART-2026-FF62100 ap_rwrite() function in Apache HTTP Server 2

Security vulnerability affects the apache2 package. The aprwrite function in Apache HTTP Server 2...

CLEANSTART-2026-PP94302 HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack

Security vulnerability affects the apache2 package. HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack...

CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2

Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...

CLEANSTART-2026-QV20553 SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2

Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2...

CLEANSTART-2026-WF86343 Potential SSRF in mod_rewrite in Apache HTTP Server 2

Security vulnerability affects the apache2 package. Potential SSRF in modrewrite in Apache HTTP Server 2...

CLEANSTART-2026-OB27244 Encoding problem in mod_proxy in Apache HTTP Server 2

Security vulnerability affects the apache2 package. Encoding problem in modproxy in Apache HTTP Server 2...

CLEANSTART-2026-BD98589 partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2

Security vulnerability affects the apache2 package. A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2...

CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests

Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...

CLEANSTART-2026-JH66547 Improper escaping of output in mod_rewrite in Apache HTTP Server 2

Security vulnerability affects the apache2 package. Improper escaping of output in modrewrite in Apache HTTP Server 2...

CLEANSTART-2026-RW47407 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2

Security vulnerability affects the apache2 package. Substitution encoding issue in modrewrite in Apache HTTP Server 2...

CLEANSTART-2026-CF08389 regression in the core of Apache HTTP Server 2

Security vulnerability affects the apache2 package. A regression in the core of Apache HTTP Server 2...

CLEANSTART-2026-IB07435 Vulnerability in core of Apache HTTP Server 2

Security vulnerability affects the apache2 package. Vulnerability in core of Apache HTTP Server 2...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.5:CLSA-2026:1791552137)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791552137 advisory. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.4:CLSA-2026:1791552138)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791552138 advisory. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791538487)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791538487 advisory. - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to...