CVE-2026-44631

The Apache HTTP Server is vulnerable to a Buffer Underwrite (also described as a buffer overflow) vulnerability in versions 2.4.0 through 2.4.67 . The root cause is the processing of crafted regular expressions within the server configuration. Exploitation of this flaw can lead to a Denial of Ser...

CVE-2026-29167

A Use After Free vulnerability exists in the Apache HTTP Server when using the mod_ldap module in a per-directory configuration . This flaw allows an attacker to utilize memory after it has been freed, potentially leading to arbitrary code execution or a denial-of-service (DoS) attack. The vulner...

CVE-2026-28780

CVE-2026-28780 is a heap-based buffer overflow in mod_proxy_ajp of Apache HTTP Server through 2.4.66 . The root cause is an off-by-AJP_HEADER_LEN check in ajp_msg_check_header() , which allows a malicious AJP backend to write 4 attacker-controlled bytes past the end of a heap buffer when mod_prox...

CVE-2026-49975

A memory allocation vulnerability with an excessive size value exists in the Apache HTTP Server 's mod_http component, affecting versions 2.4.17 through 2.4.67 . This flaw allows an attacker to trigger a denial of service (DoS) via malicious HTTP requests, specifically involving HTTP/2 cookie req...

CVE-2026-42535

The Apache HTTP Server (versions 2.4.67 and earlier ) contains a path handling issue within the mod_dav_fs module. This vulnerability allows a WebDAV content author to directly manipulate trusted DAV property databases , which may lead to child process crashes . To remediate this issue, users are...

CVE-2026-34032

The Apache HTTP Server is vulnerable to an Improper Null Termination and Out-of-bounds Read vulnerability affecting versions through 2.4.66 . The root cause is located in the mod_proxy_ajp module within the ajp_msg_get_string() function, where a failure to properly verify the NUL terminator and t...

CVE-2026-44186

The Apache HTTP Server (versions 2.4.0 through 2.4.67) contains an Infinite Loop vulnerability in the mod_proxy_ftp module. The issue occurs in the proxy_ftp_handler when scanning an FTP 120 greeting for a Retry-After delta-seconds value; the scan loop fails to advance secs_str if the greeting do...

CVE-2026-33006

The Apache HTTP Server version 2.4.66 is vulnerable to a timing attack within the mod_auth_digest module. This flaw occurs because the module uses a non-constant-time strcmp() function for comparing the nonce-hash and response-digest, which can lead to the disclosure of information based on tempo...

CVE-2026-42536

CVE-2026-42536 is a heap-based buffer overflow in the mod_xml2enc module of Apache HTTP Server (versions 2.4.0 through 2.4.67 ), triggered via the xml2StartParse function when processing untrusted content. Per FSTEC BDU, a remote attacker can exploit this to cause a service failure ; CISA SSVC ra...

CVE-2026-34355

CVE-2026-34355 is a buffer overflow in the mod_proxy_html module of Apache HTTP Server (versions 2.4.67 and earlier). The vulnerability is triggered by an untrusted backend server sending crafted content through the proxy, which can lead to a security bypass and potential service failure due to b...

CVE-2026-29170

A cross-site scripting (XSS) vulnerability exists in the mod_proxy_ftp module of Apache HTTP Server version 2.4.67 and earlier . The flaw occurs during the generation of HTML directory listings when contents are listed via either forward or reverse proxy configurations. Specifically, the issue st...

CVE-2026-33007

Apache HTTP Server versions 2.4.66 and earlier are vulnerable to a NULL pointer dereference in the mod_authn_socache module. This security flaw allows an unauthenticated remote user to crash a child process when the software is deployed in a caching forward proxy configuration . Users are recomme...

CVE-2026-33857

An out-of-bounds read vulnerability exists in the mod_proxy_ajp module of the Apache HTTP Server (versions through 2.4.66). The root cause is identified as off-by-one out-of-bounds reads occurring in the ajp_msg_get_uint8/uint16/uint32 and ajp_msg_peek_uint8/uint16 length checks. This vulnerabili...

CVE-2026-34059

The Apache HTTP Server is vulnerable to a buffer over-read vulnerability in the mod_proxy_ajp module. The root cause is located in the ajp_parse_data() function, which can process operations outside the memory buffer when encountering short AJP replies. This flaw could allow a remote attacker to ...

CVE-2026-24072

Apache HTTP Server versions 2.4.66 and earlier are vulnerable to an escalation of privilege bug affecting various modules. This flaw allows local .htaccess authors to read files with the privileges of the httpd user . Specific mention is made of mod_rewrite involving ap_expr . The vulnerability h...

CVE-2026-29168

The Apache HTTP Server is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability in the mod_md module. The issue stems from unrestricted OCSP response data , which can be exploited to trigger resource exhaustion or server failures . This vulnerability affects versions...

CVE-2026-23918

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

CVE-2026-43951

The Apache HTTP Server (versions 2.4.0 through 2.4.67 ) is vulnerable to an Out-of-bounds Read vulnerability occurring within the mod_headers and mod_mime modules when processing multiple response languages. Exploitation of this flaw can allow an attacker to compromise the confidentiality and int...

CVE-2026-44185

CVE-2026-44185 is a buffer over-read in Apache HTTP Server triggered by outbound OCSP requests sent to an attacker-controlled OCSP server. The vulnerability causes the server to read data beyond the permitted range of memory, which can lead to service interruptions (denial of service). It affects...

CVE-2026-44119

An Improper Privilege Management vulnerability exists in Apache HTTP Server version 2.4.67 and earlier . The flaw allows local .htaccess authors to read files with the privileges of the httpd user. To mitigate this risk, users are recommended to upgrade to version 2.4.68 , which contains the fix....

CVE-2026-29169

A NULL pointer dereference in the mod_dav_lock module of Apache HTTP Server version 2.4.66 and earlier allows a remote attacker to crash the server using a malicious request, resulting in a denial-of-service (DoS) attack. The module is not used internally by mod_dav or mod_dav_fs; its only known ...

CVE-2026-48913

The Apache HTTP Server is vulnerable to a Use After Free memory corruption issue in the mod_http2 module. This vulnerability occurs specifically when file handles are exhausted, potentially allowing a remote attacker to achieve arbitrary code execution or cause a denial of service (service failur...

CVE-2026-34356

The Apache HTTP Server versions 2.4.0 through 2.4.67 are susceptible to a Heap-based Buffer Overflow vulnerability. This issue is triggered when interacting with malicious backend servers while using ProxyPassReverseCookie *. One report specifically links the vulnerability to the modules/proxy/pr...

CVE-2026-33523

The Apache HTTP Server is susceptible to an HTTP response splitting vulnerability affecting multiple modules when interacting with untrusted or compromised backend servers . This flaw impacts versions through 2.4.66 and may allow an attacker to compromise the confidentiality and integrity of prot...