ALSA-2026:64794 Low: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 For more details about the securit...

TencentOS Server 4: mod_http2 (TSSA-2026:0968)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0968 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2026-70784

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

EUVD-2026-70812

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

CVE-2026-82729: Inefficient Algorithmic Complexity

Inefficient Algorithmic Complexity vulnerability in elixir-mint mint allows a remote HTTP server to exhaust CPU on the client host and cause a denial of service. parsehexprefix/2 in lib/mint/http1/parse.ex folds each hex digit of a chunked response's chunk-size field into an arbitrary-precision...

CVE-2026-85450

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

CVE-2026-85428

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

CVE-2026-85450 MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

CVE-2026-85450 MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

CVE-2026-85450

MOOS core-moos through version 10.4.0 contains a denial of service vulnerability in its MOOSDB HTTP server component. The root cause is the creation of unbounded connections and threads without limits , allowing an attacker over the network (no authentication required) to open many connections an...

CVE-2026-85450 MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

CVE-2026-85428 MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

CVE-2026-85428 MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

CVE-2026-85428 MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

CVE-2026-85428

MOOS core-moos through 10.4.0 contains an authentication bypass in its optional MOOSDB HTTP server . Unauthenticated clients can send HTTP requests with variable names and values to the MOOSDB HTTP server port, allowing them to modify MOOS variables including actuator and override commands withou...

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

...

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

...

CVE-2026-85428: Missing Authentication for Critical Function

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

PT-2026-85277

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description An authentication bypass exists in the optional MOOSDB HTTP server. This flaw allows unauthenticated clients to modify MOOS variables, including actuator and override commands, by sending HTT...

PT-2026-85299

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description The MOOSDB HTTP server is subject to a denial of service issue where it creates unbounded connections and threads without limits. An attacker can exhaust server threads and memory by opening...