https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:03:19.956723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:3816 ALSA-2021:3816 — Important: httpd:2.4 security update 2026-10-03T08:03:20.353219+00:00

Affected: AlmaLinux:8: mod_http2, AlmaLinux:8: mod_md

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:" (CVE-2021-40438)

* httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-04820 bdu:2021-04820 2026-10-03T08:03:20.353294+00:00 bdu:2021-04820 https://cve.radiocsirt.org/vuln/bell-cve-2021-40438 Withdrawn: BELL-CVE-2021-40438 — CVE-2021-40438 does not affect BellSoft software 2026-10-03T08:03:20.353311+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-apache-2021-40438 BIT-apache-2021-40438 — mod_proxy SSRF 2026-10-03T08:03:20.353327+00:00

Affected: Bitnami: apache

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-713 certfr-2021-avi-713 — De multiples vulnérabilités ont été découvertes dans Apache httpd. Elles permettent à un attaquant de provoquer un prob… 2026-10-03T08:03:20.353347+00:00 certfr-2021-avi-713 https://cve.radiocsirt.org/vuln/cnvd-2022-03224 cnvd-2022-03224 2026-10-03T08:03:20.353363+00:00 cnvd-2022-03224 https://cve.radiocsirt.org/vuln/euvd-2026-348794 EUVD-2026-348794 2026-10-03T08:03:20.353374+00:00 EUVD-2026-348794 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40438 fkie_cve-2021-40438 2026-10-03T08:03:20.353385+00:00

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/ghsa-rwxq-58vm-3v2j GHSA-rwxq-58vm-3v2j 2026-10-03T08:03:20.353406+00:00

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/gsd-2021-40438 gsd-2021-40438 2026-10-03T08:03:20.353420+00:00 gsd-2021-40438 https://cve.radiocsirt.org/vuln/icsa-22-167-06 ICSA-22-167-06 — Siemens Apache HTTP Server 2026-10-03T08:03:20.353430+00:00

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier. A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/msrc_cve-2021-40438 msrc_CVE-2021-40438 — mod_proxy SSRF 2026-10-03T08:03:20.353452+00:00 msrc_CVE-2021-40438 https://cve.radiocsirt.org/vuln/oesa-2021-1369 OESA-2021-1369 — httpd security update 2026-10-03T08:03:20.353466+00:00

Affected: openEuler:20.03-LTS-SP1: httpd, openEuler:20.03-LTS-SP2: httpd

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es): A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).(CVE-2021-36160) Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.(CVE-2021-34798) A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.(CVE-2021-40438)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1438-1 openSUSE-SU-2021:1438-1 — Security update for apache2 2026-10-03T08:03:20.353490+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/rhsa-2021:3745 RHSA-2021:3745 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9 security update 2026-10-03T08:03:20.353506+00:00

httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"

 https://cve.radiocsirt.org/vuln/suse-su-2021:3299-1 SUSE-SU-2021:3299-1 — Security update for apache2 2026-10-03T08:03:20.353521+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40438 UBUNTU-CVE-2021-40438 2026-10-03T08:03:20.353536+00:00

Affected: Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:18.04:LTS: apache2, Ubuntu:20.04:LTS: apache2

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0724 WID-SEC-W-2022-0724 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-03T08:03:20.353556+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.