https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:59:44.232598+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:22140 ALSA-2026:22140 — Important: httpd:2.4 security update 2026-10-05T00:59:44.790538+00:00

Affected: AlmaLinux:8: httpd, AlmaLinux:8: httpd-devel, AlmaLinux:8: httpd-filesystem, AlmaLinux:8: httpd-manual, AlmaLinux:8: httpd-tools, AlmaLinux:8: mod_http2, AlmaLinux:8: mod_ldap, AlmaLinux:8: mod_md, AlmaLinux:8: mod_proxy_html, AlmaLinux:8: mod_session and 1 more

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007) * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-08955 bdu:2025-08955 2026-10-05T00:59:44.790624+00:00 bdu:2025-08955 https://cve.radiocsirt.org/vuln/bell-cve-2025-53020 BELL-CVE-2025-53020 2026-10-05T00:59:44.790643+00:00

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

 https://cve.radiocsirt.org/vuln/bit-apache-2025-53020 BIT-apache-2025-53020 — Apache HTTP Server: HTTP/2 DoS by Memory Increase 2026-10-05T00:59:44.790664+00:00

Affected: Bitnami: apache

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63.

Users are recommended to upgrade to version 2.4.64, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0586 certfr-2025-avi-0586 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-05T00:59:44.790687+00:00 certfr-2025-avi-0586 https://cve.radiocsirt.org/vuln/cnvd-2025-16608 cnvd-2025-16608 2026-10-05T00:59:44.790703+00:00 cnvd-2025-16608 https://cve.radiocsirt.org/vuln/euvd-2026-259983 EUVD-2026-259983 2026-10-05T00:59:44.790714+00:00 EUVD-2026-259983 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53020 fkie_cve-2025-53020 2026-10-05T00:59:44.790724+00:00

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63.

Users are recommended to upgrade to version 2.4.64, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-c2vf-6g7v-8m6c GHSA-c2vf-6g7v-8m6c 2026-10-05T00:59:44.790745+00:00

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63.

Users are recommended to upgrade to version 2.4.64, which fixes the issue.

 https://cve.radiocsirt.org/vuln/jvndb-2026-003910 jvndb-2026-003910 2026-10-05T00:59:44.790760+00:00

Multiple vulnerabilities have been found in Cosminexus HTTP Server. CVE-2025-49630, CVE-2025-53020 These vulnerabilities does not apply if HTTP/2 protocol is disabled.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-53020 msrc_CVE-2025-53020 — Apache HTTP Server: HTTP/2 DoS by Memory Increase 2026-10-05T00:59:44.790776+00:00 msrc_CVE-2025-53020 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15360-1 openSUSE-SU-2025:15360-1 — apache2-2.4.64-1.1 on GA media 2026-10-05T00:59:44.790792+00:00

apache2-2.4.64-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:27200 RHSA-2026:27200 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update 2026-10-05T00:59:44.790811+00:00

mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow httpd: mod_md: unrestricted OCSP response leads to resource exhaustion httpd: NULL pointer dereference via specially crafted request httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

 https://cve.radiocsirt.org/vuln/rlsa-2026:22140 RLSA-2026:22140 — Important: httpd:2.4 security update 2026-10-05T00:59:44.790841+00:00

Affected: Rocky Linux:8: httpd, Rocky Linux:8: mod_http2, Rocky Linux:8: mod_md

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)

* httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059)

* httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032)

* httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)

* httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007)

* Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2025:02565-1 SUSE-SU-2025:02565-1 — Security update for apache2 2026-10-05T00:59:44.790882+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53020 UBUNTU-CVE-2025-53020 2026-10-05T00:59:44.790902+00:00

Affected: Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1529 WID-SEC-W-2025-1529 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-05T00:59:44.790928+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.