Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

130 matches found

Mageia
Mageia•added 2026/10/14 2:42 a.m.•16 views

Updated apache package fixes security vulnerabilities

Limited RCE for some internal redirects to non-CGI files in CGI directories. CVE-2026-42356 moddav shared lock overflow. CVE-2026-42528 modheartmonitor denial of service. CVE-2026-46729 modsession: Session cookie not removed during internal redirect. CVE-2026-47360 modauthdigest reauthentication...

9.8CVSS7.6AI score0.00948EPSS
SaveExploits2References21
osv_bit
osv_bit•added 2026/10/06 11:41 a.m.•21 views

BIT-APACHE-2026-79768 Apache HTTP Server: mod_userdir information disclosure

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE•added 2026/10/02 4:48 p.m.•6 views

SUSE CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux•added 2026/10/02 9:04 a.m.•22 views

httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence

A flaw was found in Apache HTTP Server's moduserdir module. When configured with an absolute path without wildcards for the UserDir directive, the server fails to properly resolve single-dot directory '/./' path equivalence. A remote attacker can exploit this issue by submitting a crafted HTTP...

5.3CVSS5.8AI score0.0053EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE•added 2026/10/02 12:35 a.m.•16 views

CVE-2026-79768

A flaw was found in Apache HTTP Server's moduserdir module. When configured with an absolute path without wildcards for the UserDir directive, the server fails to properly resolve single-dot directory '/./' path equivalence. A remote attacker can exploit this issue by submitting a crafted HTTP...

5.3CVSS6AI score0.0053EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus•added 2026/10/02 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-79768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directiv...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References4
osv_azl
osv_azl•added 2026/10/01 5:17 p.m.•16 views

AZL-106776 CVE-2026-79768 affecting package httpd 2.4.68-1

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/10/01 5:17 p.m.•15 views

DEBIAN-CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References1
osv_alpine
osv_alpine•added 2026/10/01 5:17 p.m.•18 views

ALPINE-CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/01 5:17 p.m.•24 views

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS0.0053EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu•added 2026/10/01 5:17 p.m.•14 views

UBUNTU-CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve•added 2026/10/01 5:17 p.m.•18 views

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/10/01 4:18 p.m.•87 views

CVE-2026-79768 Apache HTTP Server: mod_userdir information disclosure

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

0.0053EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux•added 2026/10/01 4:18 p.m.•15 views

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0
Mend
Mend•added 2026/10/01 4:18 p.m.•16 views

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

6.9CVSS5.9AI score0.0053EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/10/01 4:18 p.m.•15 views

CVE-2026-79768 Apache HTTP Server: mod_userdir information disclosure

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.9AI score0.0053EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/01 4:18 p.m.•22 views

EUVD-2026-90909

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References1
CVE
CVE•added 2026/10/01 4:18 p.m.•149 views

CVE-2026-79768

The Apache HTTP Server versions 2.4.0 through 2.4.68 are vulnerable to a path equivalence issue (CWE-55) within the mod_userdir module. The vulnerability occurs when the module is configured with an absolute non-wildcard UserDir directive . This flaw can lead to information disclosure . No specif...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus•added 2026/10/01 12:00 a.m.•8 views

Rocky Linux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1769099972)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769099972 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus•added 2026/10/01 12:00 a.m.•11 views

AlmaLinux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1769099972)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769099972 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables se...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References4
Rows per page
Query Builder