Apache HTTP Server before 2.4.71 affected, Cyber Centre says
Original title: Apache security advisory (AV26-1159)
Advisory AV26-1159 names no CVEs or impact and asks administrators to apply updates when available.
The Canadian Centre for Cyber Security issued advisory AV26-1159 on November 13, 2026. As of November 11, it says Apache HTTP Server versions prior to 2.4.71 are affected by vulnerabilities. The notice does not name the flaws, describe impact, or state whether they are exploited. It points readers to Apache HTTP Server project pages and urges them to apply necessary updates as they become available.
Unconfirmed: The notice does not identify the vulnerabilities or confirm a fixed release.
- The advisory serial number is AV26-1159.
- The stated affected range is Apache HTTP Server prior to 2.4.71.
- No CVE identifiers appear in the notice.
| Product | Affected |
|---|---|
| Apache HTTP Server | Prior to 2.4.71 |
- 1.Review the linked Apache HTTP Server pages and apply available updates.
- Vendors
- Apache
- Products
- Apache HTTP Server
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1159 Date: November 13, 2026 As of November 11, 2026, Apache is affected by vulnerabilities in the following product: Apache HTTP Server Prior to 2. 4. 71 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.