https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:53:30.144677+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08957 bdu:2025-08957 2026-10-03T23:53:30.297940+00:00 bdu:2025-08957 https://cve.radiocsirt.org/vuln/bell-cve-2024-43204 BELL-CVE-2024-43204 2026-10-03T23:53:30.297984+00:00

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

 https://cve.radiocsirt.org/vuln/bit-apache-2024-43204 BIT-apache-2024-43204 — Apache HTTP Server: SSRF with mod_headers setting Content-Type header 2026-10-03T23:53:30.298016+00:00

Affected: Bitnami: apache

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.

Users are recommended to upgrade to version 2.4.64 which fixes this issue.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0586 certfr-2025-avi-0586 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-03T23:53:30.298043+00:00 certfr-2025-avi-0586 https://cve.radiocsirt.org/vuln/cnvd-2025-16613 cnvd-2025-16613 2026-10-03T23:53:30.298059+00:00 cnvd-2025-16613 https://cve.radiocsirt.org/vuln/euvd-2026-259923 EUVD-2026-259923 2026-10-03T23:53:30.298071+00:00 EUVD-2026-259923 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43204 fkie_cve-2024-43204 2026-10-03T23:53:30.298081+00:00

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.

Users are recommended to upgrade to version 2.4.64 which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-q2wp-r77c-3cw8 GHSA-q2wp-r77c-3cw8 2026-10-03T23:53:30.298103+00:00

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.

Users are recommended to upgrade to version 2.4.64 which fixes this issue.

 https://cve.radiocsirt.org/vuln/jvndb-2026-003912 jvndb-2026-003912 2026-10-03T23:53:30.298119+00:00

Vulnerability has been found in Cosminexus HTTP Server and Hitachi Web Server. CVE-2024-43204

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-43204 msrc_CVE-2024-43204 — Apache HTTP Server: SSRF with mod_headers setting Content-Type header 2026-10-03T23:53:30.298135+00:00 msrc_CVE-2024-43204 https://cve.radiocsirt.org/vuln/ncsc-2026-0027 NCSC-2026-0027 — Kwetsbaarheden verholpen in Oracle Fusion Middleware 2026-10-03T23:53:30.298151+00:00 NCSC-2026-0027 https://cve.radiocsirt.org/vuln/oesa-2025-2168 OESA-2025-2168 — httpd security update 2026-10-03T23:53:30.298207+00:00

Affected: openEuler:20.03-LTS-SP4: httpd

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es):

HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response.

This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue.

Users are recommended to upgrade to version 2.4.64, which fixes this issue.(CVE-2024-42516)

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.

Users are recommended to upgrade to version 2.4.64 which fixes this issue.(CVE-2024-43204)

Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations.

In a logging configuration where CustomLog is used with "%{varname}x" or "%{varname}c" to log variables provided by mod_ssl such as SSL_TLS_SNI, no escaping is performed by either mod_log_config or mod_ssl and unsanitized data provided by the client may appear in log files.(CVE-2024-47252)

In some mod_ssl configurations on Apache HTTP Server 2.4.35 th…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15360-1 openSUSE-SU-2025:15360-1 — apache2-2.4.64-1.1 on GA media 2026-10-03T23:53:30.298248+00:00

apache2-2.4.64-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:56868 RHSA-2026:56868 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update 2026-10-03T23:53:30.298269+00:00

httpd: incomplete fix for CVE-2023-38709 httpd: SSRF in Apache HTTP Server with mod_proxy loaded Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration httpd: Apache HTTP Server: Cross-site scripting in mod_proxy_ftp via HTML directory list generation httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server httpd: Apache HTTP Server: Denial of Service via crafted regular expressions httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.

 https://cve.radiocsirt.org/vuln/suse-su-2025:02565-1 SUSE-SU-2025:02565-1 — Security update for apache2 2026-10-03T23:53:30.298314+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43204 UBUNTU-CVE-2024-43204 2026-10-03T23:53:30.298333+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:25.10: apache2

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1529 WID-SEC-W-2025-1529 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-03T23:53:30.298362+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.