PT-2026-113746

A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request on a TCP connection has its path rewritten. An attacker can send a pipelined second request that is relayed verbatim t...

PT-2026-113835

🚨 CVE-2026-101983 A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured. 🎖@cveNotify...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Using $ docker-compose up Using from Docker Hub $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master · DrunkenShells/Disclosures...

DEBIAN-CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-88834 Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

EUVD-2026-98899

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-88834

A flaw in BusyBox's httpd web server allows for a user existence oracle when configured with system password authentication. In certain build configurations, an attacker can distinguish between existing and non-existing usernames by observing authentication failure behaviors. The impact is limite...

Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server

Description: This update fixes the following issues: proxy-httpd-image: Version 5.2.10 Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: Version 5.2.9 Image rebuilt to the newest version with updated dependencies for SUSE...

PT-2026-111735

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-59797 affecting package httpd for versions less than 2.4.69-1

CVE-2026-59797 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-79768 affecting package httpd for versions less than 2.4.69-1

CVE-2026-79768 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42528 affecting package httpd for versions less than 2.4.69-1

CVE-2026-42528 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-48005 affecting package httpd for versions less than 2.4.69-1

CVE-2026-48005 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63686 affecting package httpd for versions less than 2.4.69-1

CVE-2026-63686 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63045 affecting package httpd for versions less than 2.4.69-1

CVE-2026-63045 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42356 affecting package httpd for versions less than 2.4.69-1

CVE-2026-42356 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...