https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:12:13.728993+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08951 bdu:2025-08951 2026-10-03T06:12:13.857067+00:00 bdu:2025-08951 https://cve.radiocsirt.org/vuln/bell-cve-2024-43394 BELL-CVE-2024-43394 2026-10-03T06:12:13.857110+00:00

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

 https://cve.radiocsirt.org/vuln/bit-apache-2024-43394 BIT-apache-2024-43394 — Apache HTTP Server: SSRF on Windows due to UNC paths 2026-10-03T06:12:13.857151+00:00

Affected: Bitnami: apache

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via  mod_rewrite or apache expressions that pass unvalidated request input.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63.

Note:  The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths.

The server offers limited protection against administrators directing the server to open UNC paths. Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0586 certfr-2025-avi-0586 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-03T06:12:13.857201+00:00 certfr-2025-avi-0586 https://cve.radiocsirt.org/vuln/cnvd-2025-16609 cnvd-2025-16609 2026-10-03T06:12:13.857227+00:00 cnvd-2025-16609 https://cve.radiocsirt.org/vuln/euvd-2026-259924 EUVD-2026-259924 2026-10-03T06:12:13.857246+00:00 EUVD-2026-259924 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43394 fkie_cve-2024-43394 2026-10-03T06:12:13.857264+00:00

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via  mod_rewrite or apache expressions that pass unvalidated request input.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63.

Note:  The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths.

The server offers limited protection against administrators directing the server to open UNC paths. Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.

 https://cve.radiocsirt.org/vuln/ghsa-gxxm-rhpx-j39m GHSA-gxxm-rhpx-j39m 2026-10-03T06:12:13.857310+00:00

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via  mod_rewrite or apache expressions that pass unvalidated request input.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63.

Note:  The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths.

The server offers limited protection against administrators directing the server to open UNC paths. Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15360-1 openSUSE-SU-2025:15360-1 — apache2-2.4.64-1.1 on GA media 2026-10-03T06:12:13.857347+00:00

apache2-2.4.64-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43394 Withdrawn: UBUNTU-CVE-2024-43394 2026-10-03T06:12:13.857377+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:25.04: apache2

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note:  The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths. The server offers limited protection against administrators directing the server to open UNC paths. Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1529 WID-SEC-W-2025-1529 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-03T06:12:13.857434+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.