vulnwire

All · Apache HTTP Server

Newest first. Every filter here is also a feed: see the subscribe box.

  1. 7.5high
    CVE-2026-63686Apache HTTP Server: mod_xml2enc crash on charset conversion failure
    Apache HTTP Server
    36 d ago
  2. 8.8high
    CVE-2026-93546Apache HTTP Server: mod_dav_fs namespace overflow
    Apache HTTP Server
    36 d ago
  3. 5.3med
    CVE-2026-79768Apache HTTP Server: mod_userdir information disclosure
    Apache HTTP Server
    36 d ago
  4. 7.3high
    CVE-2026-73637Apache HTTP Server: mod_auth_digest DoS attack
    Apache HTTP Server
    36 d ago
  5. 8.1high
    CVE-2026-73636Apache HTTP Server: mod_auth_digest one-time-nonce replay attack
    Apache HTTP Server
    36 d ago
  6. 7.5high
    CVE-2026-63718Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling
    Apache HTTP Server
    36 d ago
  7. 7.5high
    CVE-2026-63292Apache HTTP Server: mod_vhost_alias stack overflow
    Apache HTTP Server
    36 d ago
  8. 7.5high
    CVE-2026-63045Apache HTTP Server: mod_proxy_ftp PASV address handling
    Apache HTTP Server
    36 d ago
  9. 9.8crit
    CVE-2026-59797Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
    Apache HTTP Server
    36 d ago
  10. 7.5high
    CVE-2026-59685Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
    Apache HTTP Server
    36 d ago
  11. 5.3med
    CVE-2026-58415Apache HTTP Server: mod_dav_fs property database read access
    Apache HTTP Server
    36 d ago
  12. 9.8crit
    CVE-2026-57941Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy
    Apache HTTP Server
    36 d ago
  13. 7.5high
    CVE-2026-56449Apache HTTP Server: mod_proxy_html: crash in dump_content
    Apache HTTP Server
    36 d ago
  14. 9.8crit
    CVE-2026-56154Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}
    Apache HTTP Server
    36 d ago
  15. 7.5high
    CVE-2026-56153Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
    Apache HTTP Server
    36 d ago
  16. 7.5high
    CVE-2026-48005Apache HTTP Server: mod_auth_digest reauthentication attack
    Apache HTTP Server
    36 d ago
  17. 7.5high
    CVE-2026-47360Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
    Apache HTTP Server
    36 d ago
  18. 7.5high
    CVE-2026-46729Apache HTTP Server: mod_heartmonitor denial of service
    Apache HTTP Server
    36 d ago
  19. 3.7low
    CVE-2026-42356Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
    Apache HTTP Server
    36 d ago
  20. 4.3med
    CVE-2026-42528Apache HTTP Server: mod_dav shared lock overflow
    Apache HTTP Server
    36 d ago
  21. 7.5high
    CVE-2026-49975Apache HTTP Server: mod_http2 denial of service
    Apache HTTP Server
    4 mo ago
  22. 7.3high
    CVE-2026-48913Apache HTTP Server: mod_http2 memory corruption when file handles exhausted
    Apache HTTP Server
    4 mo ago
  23. 7.5high
    CVE-2026-42536Apache HTTP Server: mod_xml2enc heap overflow
    Apache HTTP Server
    4 mo ago
  24. 7.3high
    CVE-2026-44185Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
    Apache HTTP Server
    4 mo ago
  25. 7.5high
    CVE-2026-34355Apache HTTP Server: mod_proxy_html buffer overflow
    Apache HTTP Server
    4 mo ago
  26. 9.8crit
    CVE-2026-44631Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
    Apache HTTP Server
    4 mo ago
  27. 5.5med
    CVE-2026-44119Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules
    Apache HTTP Server
    4 mo ago
  28. 6.5med
    CVE-2026-43951Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash
    Apache HTTP Server
    4 mo ago
  29. 9.1crit
    CVE-2026-42535Apache HTTP Server: mod_dav_fs protected directory access
    Apache HTTP Server
    4 mo ago
  30. 7.5high
    CVE-2026-34356Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow
    Apache HTTP Server
    4 mo ago