CVE-2026-34501

The CVE-2026-34501 issue is a heap-based buffer overflow in the Apache Portable Runtime Utility redis client, affecting APR Utility versions 1.6.0 through 1.6.3. The vulnerability is triggered by a memory handling bug in the redis client, with network exposure (AV:N/AC:L) and high impact on avail...

CVE-2026-34191

The CVE-2026-34191 entry concerns an SQL Injection vulnerability in the Apache Portable Runtime Utility via the apr_dbd_oracle provider. Affected range is APIs/versions 1.6.0 through 1.6.3 . The root cause is improper neutralization of special elements used in SQL commands, enabling potential una...