| CVE-2026-44631 |
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-44119 |
Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to…
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-43951 |
Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-42535 |
A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate…
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-34356 |
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and…
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-44186 |
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server…
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-29170 |
A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server…
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-29167 |
Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects…
|
Not rated
|
Jun 8, 2026 |
| CVE-2026-28780 |
Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server
|
Not rated
|
May 5, 2026 |
| CVE-2026-29168 |
Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response…
|
Not rated
|
May 5, 2026 |
| CVE-2026-29169 |
A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the…
|
Not rated
|
May 4, 2026 |
| CVE-2026-23918 |
Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol
|
Not rated
|
May 4, 2026 |
| CVE-2026-33006 |
A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a…
|
Not rated
|
May 4, 2026 |
| CVE-2026-33007 |
A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated…
|
Not rated
|
May 4, 2026 |
| CVE-2026-33523 |
HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend…
|
Not rated
|
May 4, 2026 |
| CVE-2026-33857 |
Out-of-bounds Read vulnerability in mod_proxy_ajp of
Apache HTTP Server
|
Not rated
|
May 4, 2026 |
| CVE-2026-34032 |
Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server
|
Not rated
|
May 4, 2026 |
| CVE-2026-34059 |
Buffer Over-read vulnerability in Apache HTTP Server
|
Not rated
|
May 4, 2026 |
| CVE-2026-24072 |
An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to…
|
Not rated
|
May 4, 2026 |
| CVE-2025-58098 |
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes…
|
Not rated
|
Dec 5, 2025 |
| CVE-2025-66200 |
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server
|
Not rated
|
Dec 5, 2025 |
| CVE-2025-65082 |
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment…
|
Not rated
|
Dec 5, 2025 |
| CVE-2025-59775 |
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and…
|
Not rated
|
Dec 5, 2025 |
| CVE-2025-55753 |
An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in…
|
Not rated
|
Dec 5, 2025 |
| CVE-2025-54090 |
A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true"
|
Not rated
|
Jul 23, 2025 |