Search: “Apache”

2 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 564 Exploit / PoC 205 Malware 164 Ransomware 147 Data breach 67 Research 54 Industry 50 Threat actor 49 Policy & legal 33 AI tools & infra 31 Model release 18 Phishing & fraud 16 Advisory 12 AI industry 11

SeverityAll critical 707 high 316 medium 216 low 137 info 71

USN-8571-2: Apache HTTP Server regression

Ubuntu issues USN-8571-2 fixing an Apache HTTP Server regression that prevented startup when HTTP/2 proxying was enabled.

Ubuntu released USN-8571-2 to fix a regression introduced by USN-8571-1 in Apache HTTP Server. The earlier fix was incomplete due to a missing library symbol, causing Apache to fail to start when HTTP/2 proxying was enabled. The original advisory addressed CVE-2026-33007, a memory-handling flaw in mod_authn_socache allowing remote denial of service, and an HTTP response splitting vulnerability affecting multiple modules, credited to Pavel Kohout, Arkadi Vainbrand, Haruki Oyama, Merih Mengisteab, and Dawit Jeong.

Ubuntu Security Noticesupdated Sep 16, 20:12 UTC · 11h agofirst Sep 10, 19:36 UTC · 6d agoAdvisory 14 sources CVE-2026-330071

USN-8734-1: PHP vulnerabilities

Ubuntu issued USN-8734-1 fixing three PHP denial-of-service flaws in SOAP, metaphone() and phar handling, including CVE-2026-7262 and CVE-2026-7568.

Ubuntu security notice USN-8734-1 addresses multiple PHP vulnerabilities. CVE-2026-7262 is a NULL pointer dereference in Apache map decoding in SOAP servers with a typemap configured; CVE-2026-7568 is a signed integer overflow in metaphone() causing an out-of-bounds read; and CVE-2026-7260 involves unbounded recursion from circular symbolic links in phar archives. All issues could allow remote attackers to cause denial-of-service conditions.

Ubuntu Security NoticesSep 7, 13:56 UTC · 9d agoAdvisory CVE-2026-7262 CVE-2026-7568 CVE-2026-7260