Apache HTTP Server

Mentions · 7d0
Mentions · 30d25
All mentions27
First seenAug 12, 2026
Last mentioned16d ago

Timeline

27 articles · newest first

USN-8931-1: Apache HTTP Server vulnerabilities

Ubuntu patched Apache HTTP Server flaws that may leak data, misroute proxy requests, or allow denial of service or code execution.

Ubuntu Security NoticesOct 14, 18:21 UTC · 16d agoAdvisoryCVE-2026-58415 CVE-2026-63045 CVE-2026-632924 · 1 read

500 Internal Server Error: What It Means and How to Fix It

Sucuri explains common causes of HTTP 500 errors, including bad plugins, .htaccess, PHP limits, and hacked-site symptoms.

Sucuri BlogOct 14, 18:00 UTC · 16d agoOther8 · 4 reads

Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week

GBHackers' weekly digest highlights NetScaler zero-days, a 3-million-person Pentagon breach, and multiple AI security incidents.

GBHackersOct 6, 05:10 UTC · 24d agoIndustryExploited6 · 1 read

Apache HTTP Server Flaws Enable Remote Code Execution and Denial-of-Service Attacks

Apache urges HTTP Server 2.4.68 after flaws that can enable code execution, source disclosure, and denial of service.

GBHackersOct 2, 05:01 UTC · 28d agoVulnerabilityCVE-2024-38475 CVE-2024-38474 CVE-2024-38476+311 · 4 reads

Multiple Apache HTTP Server Vulnerabilities Could Enable Code Execution Attacks

Apache HTTP Server 2.4.69 patches 20 flaws, including limited code execution and WebDAV crash risks.

Cyber Security NewsOct 2, 03:31 UTC · 28d agoVulnerabilityCVE-2026-63292 CVE-2026-42356 CVE-2026-42528+1711 · 7 reads

CVE-2026-93546: Apache HTTP Server: mod_dav_fs namespace overflow

Authenticated WebDAV clients can crash Apache HTTP Server and corrupt property data via CVE-2026-93546.

oss-securityOct 1, 19:00 UTC · 29d agoVulnerability 2 sourcesCVE-2026-935462 · 1 read

CVE-2026-79768: Apache HTTP Server: mod_userdir information disclosure

Apache rates CVE-2026-79768, a mod_userdir information disclosure through version 2.4.68, as low.

oss-securityOct 1, 18:58 UTC · 29d agoVulnerability 2 sourcesCVE-2026-797682 · 1 read

CVE-2026-73637: Apache HTTP Server: mod_auth_digest DoS attack

Unauthenticated clients can corrupt Apache Digest authentication state via CVE-2026-73637 under specific settings.

oss-securityOct 1, 18:56 UTC · 29d agoVulnerability 10 sourcesCVE-2026-736373

CVE-2026-73636: Apache HTTP Server: mod_auth_digest one-time-nonce replay attack

Apache mod_auth_digest lets a MITM replay captured digest credentials through version 2.4.68.

oss-securityOct 1, 18:54 UTC · 29d agoVulnerability 10 sourcesCVE-2026-736362 · 1 read

CVE-2026-63718: Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Apache mod_proxy_uwsgi can smuggle responses via crafted Transfer-Encoding through 2.4.68.

oss-securityOct 1, 18:52 UTC · 29d agoVulnerability 10 sourcesCVE-2026-637182 · 1 read

CVE-2026-63686: Apache HTTP Server: mod_xml2enc crash on charset conversion failure

An untrusted backend can crash Apache HTTP Server via a mod_xml2enc NULL pointer dereference.

oss-securityOct 1, 18:50 UTC · 29d agoVulnerability 10 sourcesCVE-2026-636862 · 1 read

CVE-2026-63292: Apache HTTP Server: mod_vhost_alias stack overflow

Apache mod_vhost_alias stack overflow may allow code execution via an oversized Host header.

oss-securityOct 1, 18:49 UTC · 29d agoVulnerability 10 sourcesCVE-2026-632927 · 2 reads

CVE-2026-63045: Apache HTTP Server: mod_proxy_ftp PASV address handling

Apache HTTP Server mod_proxy_ftp through 2.4.68 can follow a malicious FTP PASV reply to a third-party host.

oss-securityOct 1, 18:47 UTC · 29d agoVulnerability 10 sourcesCVE-2026-630453 · 1 read

CVE-2026-59797: Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function

Apache mod_ssl through 2.4.68 lets SSLRequire .htaccess expressions call file functions, a low-severity issue.

oss-securityupdated Oct 1, 18:56 UTC · 29d agofirst Oct 1, 18:45 UTC · 29d agoVulnerability 10 sourcesCVE-2026-597973 · 3 reads

CVE-2026-59685: Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM

CVE-2026-59685 is a moderate Apache HTTP Server out-of-bounds write on Windows when 8.3 names expand.

oss-securityupdated Oct 1, 18:56 UTC · 29d agofirst Oct 1, 18:43 UTC · 29d agoVulnerability 10 sourcesCVE-2026-596852 · 1 read

CVE-2026-58415: Apache HTTP Server: mod_dav_fs property database read access

CVE-2026-58415 lets remote clients read WebDAV dead properties from Apache mod_dav_fs state files.

oss-securityupdated Oct 1, 18:56 UTC · 29d agofirst Oct 1, 18:41 UTC · 29d agoVulnerability 10 sourcesCVE-2026-584153

CVE-2026-57941: Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy

CVE-2026-57941 is a moderate mod_http2 use-after-free and wild write via session-buffer re-entrancy.

oss-securityupdated Oct 1, 18:56 UTC · 29d agofirst Oct 1, 18:39 UTC · 29d agoVulnerability 10 sourcesCVE-2026-579416 · 4 reads

CVE-2026-56449: Apache HTTP Server: mod_proxy_html: crash in dump_content

Apache httpd mod_proxy_html can crash in dump_content; CVE-2026-56449 is rated low.

oss-securityOct 1, 18:37 UTC · 29d agoVulnerability 8 sourcesCVE-2026-564493 · 1 read

CVE-2026-56154: Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

Apache httpd mod_rewrite has a low-severity use-after-free via %{LA-U:HTTP:...}, CVE-2026-56154.

oss-securityOct 1, 18:35 UTC · 29d agoVulnerability 8 sourcesCVE-2026-561544 · 2 reads

CVE-2026-56153: Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char

Apache httpd mod_charset_lite has a low-severity heap overflow in finish_partial_char, CVE-2026-56153.

oss-securityOct 1, 18:33 UTC · 29d agoVulnerability 8 sourcesCVE-2026-561531

CVE-2026-48005: Apache HTTP Server: mod_auth_digest reauthentication attack

Apache httpd before 2.4.69 lets remote clients force Digest re-authentication, CVE-2026-48005.

oss-securityOct 1, 18:31 UTC · 29d agoVulnerability 8 sourcesCVE-2026-480052

CVE-2026-47360: Apache HTTP Server: mod_session: Session cookie not removed during internal redirect

Apache HTTP Server 2.4.0 through 2.4.68 can leak session cookies to backends across internal redirects.

oss-securityOct 1, 18:30 UTC · 29d agoVulnerability 8 sourcesCVE-2026-473603 · 1 read

CVE-2026-46729: Apache HTTP Server: mod_heartmonitor denial of service

Apache discloses low-severity CVE-2026-46729, a mod_heartmonitor NULL dereference that can crash HTTP Server.

oss-securityOct 1, 18:28 UTC · 29d agoVulnerability 8 sourcesCVE-2026-467292 · 2 reads

CVE-2026-42528: Apache HTTP Server: mod_dav shared lock overflow

Moderate CVE-2026-42528 in Apache mod_dav lets WebDAV lock creators crash httpd child processes.

oss-securityupdated Oct 1, 18:37 UTC · 29d agofirst Oct 1, 18:26 UTC · 29d agoVulnerability 8 sourcesCVE-2026-425282 · 1 read

CVE-2026-42356: Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories

Low-severity CVE-2026-42356 can execute some non-CGI files in Apache HTTP Server CGI directories.

oss-securityupdated Oct 1, 18:37 UTC · 29d agofirst Oct 1, 18:24 UTC · 29d agoVulnerability 8 sourcesCVE-2026-423563 · 2 reads

USN-8571-2: Apache HTTP Server regression

Ubuntu issues USN-8571-2 fixing an Apache HTTP Server regression that prevented startup when HTTP/2 proxying was enabled.

Ubuntu Security NoticesSep 10, 19:36 UTC · Sep 10, 2026AdvisoryCVE-2026-330072

HTTP/2 Bomb CVE-2026-49975

Fortinet advisory details CVE-2026-49975, an Apache HTTP Server HTTP/2 flaw enabling denial of service, affecting versions 2.4.17 through 2.4.67.

Fortinet PSIRTAug 12, 07:00 UTC · Aug 12, 2026AdvisoryCVE-2026-499753 · 1 read

Related CVEs

by mentions

CVE-2026-63292<1%7.5
Stack buffer overflow in Apache HTTP Server mod_vhost_alias
published 29d agoApache Software Foundation Apache HTTP ServerPoC
CVE-2026-630457.5
FTP PASV address spoofing in Apache mod_proxy_ftp
published 29d agoApache Software Foundation Apache HTTP Server
CVE-2026-584155.3
WebDAV state-file disclosure in Apache HTTP Server
published 29d agoApache Software Foundation Apache HTTP Server (mod_dav_fs)
CVE-2026-561549.8
Use-after-free in Apache HTTP Server mod_rewrite
published 29d agoApache Software Foundation Apache HTTP Server
CVE-2026-736368.1
Capture-replay auth bypass in Apache HTTP Server mod_auth_digest
published 29d agoApache Software Foundation Apache HTTP Server
CVE-2026-473607.5
Session cookie leak in Apache HTTP Server mod_session_cookie
published 29d agoApache HTTP Server
CVE-2026-480057.5
Forced re-auth DoS in Apache HTTP Server mod_auth_digest
published 29d agoApache Software Foundation Apache HTTP Server
CVE-2026-636867.5
NULL pointer DoS in Apache HTTP Server mod_xml2enc
published 29d agoApache Software Foundation Apache HTTP Server
CVE-2026-736377.3
Use-after-free in Apache HTTP Server mod_auth_digest
published 29d agoApache Software Foundation Apache HTTP Server
CVE-2026-797685.3
Path-equivalence info leak in Apache mod_userdir
published 29d agoApache Software Foundation Apache HTTP Server (mod_userdir)

Appears with

Apache Software Foundationvendor · 24
Apache Software Foundationorganization · 21
mod_auth_digestproduct · 3
Apachevendor · 2
Fortinetvendor · 2
mod_dav_fsproduct · 2
mod_userdirproduct · 1
mod_proxy_htmlproduct · 1
mod_charset_liteproduct · 1
OpenSSLproduct · 1
mod_xml2encproduct · 1
KillSecmalware · 1
Ciscovendor · 1
Cisco SD-WANproduct · 1
mod_http2product · 1
NetScalerproduct · 1

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned 16d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.