https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:50:10.632330+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:23732 ALSA-2025:23732 — Important: httpd:2.4 security update 2026-10-02T17:50:11.122938+00:00

Affected: AlmaLinux:8: httpd, AlmaLinux:8: httpd-devel, AlmaLinux:8: httpd-filesystem, AlmaLinux:8: httpd-manual, AlmaLinux:8: httpd-tools, AlmaLinux:8: mod_http2, AlmaLinux:8: mod_ldap, AlmaLinux:8: mod_md, AlmaLinux:8: mod_proxy_html, AlmaLinux:8: mod_session and 1 more

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-15636 bdu:2025-15636 2026-10-02T17:50:11.123027+00:00 bdu:2025-15636 https://cve.radiocsirt.org/vuln/bell-cve-2025-55753 BELL-CVE-2025-55753 2026-10-02T17:50:11.123046+00:00

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

 https://cve.radiocsirt.org/vuln/bit-apache-2025-55753 BIT-apache-2025-55753 — Apache HTTP Server: mod_md (ACME), unintended retry intervals 2026-10-02T17:50:11.123068+00:00

Affected: Bitnami: apache

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.

This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1071 certfr-2025-avi-1071 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-02T17:50:11.123091+00:00 certfr-2025-avi-1071 https://cve.radiocsirt.org/vuln/cnvd-2025-30837 cnvd-2025-30837 2026-10-02T17:50:11.123108+00:00 cnvd-2025-30837 https://cve.radiocsirt.org/vuln/euvd-2026-262684 EUVD-2026-262684 2026-10-02T17:50:11.123120+00:00 EUVD-2026-262684 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55753 fkie_cve-2025-55753 2026-10-02T17:50:11.123130+00:00

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.

This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-3j5h-f552-7rhh GHSA-3j5h-f552-7rhh 2026-10-02T17:50:11.123154+00:00

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.

This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-55753 msrc_CVE-2025-55753 — Apache HTTP Server: mod_md (ACME), unintended retry intervals 2026-10-02T17:50:11.123172+00:00 msrc_CVE-2025-55753 https://cve.radiocsirt.org/vuln/ncsc-2026-0102 NCSC-2026-0102 — Kwetsbaarheden verholpen in Apple macOS 2026-10-02T17:50:11.123188+00:00 NCSC-2026-0102 https://cve.radiocsirt.org/vuln/oesa-2026-1064 OESA-2026-1064 — httpd security update 2026-10-02T17:50:11.123280+00:00

Affected: openEuler:24.03-LTS-SP3: httpd

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es):

An integer overflow vulnerability was found in Apache HTTP Server versions 2.4.30 to 2.4.66. In case of failed ACME certificate renewal, after a number of failures (~30 days in default configurations), the backoff timer becomes 0. Certificate renewal attempts are then repeated without delays until successful. This issue affects confidentiality, integrity, and availability.(CVE-2025-55753)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15808-1 openSUSE-SU-2025:15808-1 — apache2-2.4.66-1.1 on GA media 2026-10-02T17:50:11.123303+00:00

apache2-2.4.66-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:0009 RHSA-2026:0009 — Red Hat Security Advisory: httpd:2.4 security update 2026-10-02T17:50:11.123320+00:00

mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

 https://cve.radiocsirt.org/vuln/suse-su-2025:4488-1 SUSE-SU-2025:4488-1 — Security update for apache2 2026-10-02T17:50:11.123338+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-55753 UBUNTU-CVE-2025-55753 2026-10-02T17:50:11.123354+00:00

Affected: Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:25.10: apache2, Ubuntu:26.04:LTS: apache2

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2750 WID-SEC-W-2025-2750 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-02T17:50:11.123380+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.