Search: “Apache HTTP Server”

173 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 64 Vulnerability 58 Malware 22 Ransomware 17 Threat actor 5 Data breach 3 Advisory 2 Research 1 Policy & legal 1 Phishing & fraud 1

SeverityAll critical 146 high 27 medium 1 low 0 info 0

More than 2 million Apache HTTP servers affected by CVE-2019

Security AffairsApr 5, 07:51 UTC · Apr 5, 2019Vulnerability CVE-2019-0211

Apache fixed a source code disclosure flaw in Apache HTTP Server

Security AffairsJul 7, 17:20 UTC · Jul 7, 2024Vulnerability CVE-2024-39884

U.S. CISA adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 2, 07:50 UTC · May 2, 2025Exploit / PoC in the wildCVE-2024-38475 CVE-2023-44221

Threat Advisory: Apache HTTP Server zero-day vulnerability opens door for attackers

Cisco TalosOct 7, 19:36 UTC · Oct 7, 2021Exploit / PoC in the wildCVE-2021-41733 CVE-2021-42013

Network Security Trends: August

Palo Alto Unit 42Jun 6, 00:57 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-40438 CVE-2021-34473 CVE-2021-38647+9 CVEs

QNAP Advises Users to Update NAS Firmware to Patch Apache HTTP Vulnerabilities

The Hacker NewsApr 22, 08:15 UTC · Apr 22, 2022Vulnerability CVE-2022-22721 CVE-2022-23943 CVE-2022-22719+3 CVEs

Apache rolled out a new update in a few days to fix incomplete patch for actively exploited flaw

Security AffairsOct 8, 07:38 UTC · Oct 8, 2021Vulnerability in the wildCVE-2021-41773 CVE-2021-42013

New Apache Web Server Bug Threatens Security of Shared Web Hosts

The Hacker NewsApr 3, 09:07 UTC · Apr 3, 2019Exploit / PoC CVE-2019-0211 CVE-2019-0217 CVE-2019-0215

Expert published NMAP script for Apache CVE-2021

Security AffairsOct 9, 12:04 UTC · Oct 9, 2021Vulnerability in the wildCVE-2021-41773 CVE-2021-420131

Apache fixes actively exploited web server zero

The RecordDec 16, 00:00 UTC · Dec 16, 2022Exploit / PoC in the wildCVE-2021-41773

Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!

The Hacker NewsOct 7, 05:31 UTC · Oct 7, 2021Exploit / PoC in the wildCVE-2021-41773 CVE-2021-41524

Experts warn of attacks exploiting CVE-2021

Security AffairsNov 29, 15:18 UTC · Nov 29, 2021Exploit / PoC in the wildCVE-2021-40438

PoC exploit for Carpe Diem Apache bug released

Help Net SecurityApr 9, 00:00 UTC · Apr 9, 2019Exploit / PoC CVE-2019-0211

Apache patch a zero

Security AffairsOct 5, 17:15 UTC · Oct 5, 2021Vulnerability in the wildCVE-2021-41773 CVE-2021-41524

RondoDox Botnet targets 56 flaws across 30+ device types worldwide

Security AffairsOct 10, 07:33 UTC · Oct 10, 2025Malware CVE-2024-3721 CVE-2024-12856 CVE-2023-1389+33 CVEs

Threat Source newsletter (Oct. 14, 2021)

Cisco TalosOct 14, 18:00 UTC · Oct 14, 2021Ransomware in the wildCVE-2021-40461 CVE-2021-38672 CVE-2021-41733+1 CVEs

Attackers exploited old flaws to breach SonicWall SMA appliances (CVE-2024-38475, CVE-2023-44221)

Help Net SecurityMay 2, 00:00 UTC · May 2, 2025Vulnerability in the wildCVE-2024-38475 CVE-2023-44221

SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models

The Hacker NewsMay 5, 15:51 UTC · May 5, 2025Exploit / PoC in the wildCVE-2023-44221 CVE-2024-38475 CVE-2021-20035

CISA adds Zoho, Apache, Qualcomm, Mikrotik flaws to the list of actively exploited issues

Security AffairsDec 2, 20:17 UTC · Dec 2, 2021Advisory in the wildCVE-2021-37415 CVE-2021-44077 CVE-2018-14847+2 CVEs

US Government Urges Action to Mitigate Androxgh0st Malware Threat

Infosecurity MagazineJan 17, 11:05 UTC · Jan 17, 2024Malware in the wildCVE-2017-9841 CVE-2018-15133 CVE-2021-41773

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

The Hacker NewsOct 22, 12:56 UTC · Oct 22, 2025Vulnerability CVE-2025-53770 CVE-2025-49704 CVE-2025-49706+1 CVEs

Apache fixes critical HTTP/2 double-free flaw CVE-2026

Security AffairsMay 6, 11:00 UTC · May 6, 2026Exploit / PoC CVE-2026-239181

U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog

CISA added actively exploited CVE-2026-21962, a CVSS 10.0 unauthenticated flaw in Oracle HTTP Server and WebLogic Proxy Plug-in, to KEV with an August 27 deadline.

CISA added CVE-2026-21962 (CVSS 10.0), an improper access control vulnerability in Oracle HTTP Server and the Oracle WebLogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities catalog and ordered federal agencies to remediate by August 27, 2026. The unauthenticated flaw allows remote attackers with network access to create, delete, or modify critical data, potentially gain broad access, and cause a scope change to other systems; affected versions are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. CloudSEK honeypot data from January-February 2026 showed widespread exploitation of the flaw alongside older WebLogic RCEs including CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271.

Security AffairsAug 25, 08:50 UTC · 21d agoExploit / PoC in the wildCVE-2026-21962 CVE-2020-14882 CVE-2020-14883+2 CVEs