https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:25:37.105924+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06305 bdu:2026-06305 2026-10-02T23:25:37.337341+00:00 bdu:2026-06305 https://cve.radiocsirt.org/vuln/bell-cve-2026-23918 BELL-CVE-2026-23918 2026-10-02T23:25:37.337382+00:00

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

 https://cve.radiocsirt.org/vuln/bit-apache-2026-23918 BIT-apache-2026-23918 — Apache HTTP Server: http2: double free and possible RCE on early reset 2026-10-02T23:25:37.337413+00:00

Affected: Bitnami: apache

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

This issue affects Apache HTTP Server: 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0530 certfr-2026-avi-0530 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-02T23:25:37.337438+00:00 certfr-2026-avi-0530 https://cve.radiocsirt.org/vuln/cnvd-2026-21690 cnvd-2026-21690 2026-10-02T23:25:37.337454+00:00 cnvd-2026-21690 https://cve.radiocsirt.org/vuln/euvd-2026-337474 EUVD-2026-337474 2026-10-02T23:25:37.337466+00:00 EUVD-2026-337474 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23918 fkie_cve-2026-23918 2026-10-02T23:25:37.337476+00:00

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

This issue affects Apache HTTP Server: 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-p8fm-9c82-pw4g GHSA-p8fm-9c82-pw4g 2026-10-02T23:25:37.337498+00:00

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

This issue affects Apache HTTP Server: 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-23918 msrc_CVE-2026-23918 — Apache HTTP Server: http2: double free and possible RCE on early reset 2026-10-02T23:25:37.337513+00:00 msrc_CVE-2026-23918 https://cve.radiocsirt.org/vuln/ncsc-2026-0134 NCSC-2026-0134 — Kwetsbaarheden verholpen in Apache HTTP Server 2026-10-02T23:25:37.337530+00:00 NCSC-2026-0134 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10785-1 openSUSE-SU-2026:10785-1 — apache2-2.4.67-1.1 on GA media 2026-10-02T23:25:37.337558+00:00

apache2-2.4.67-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:13938 RHSA-2026:13938 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T23:25:37.337577+00:00

Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

 https://cve.radiocsirt.org/vuln/suse-su-2026:2103-1 SUSE-SU-2026:2103-1 — Security update for apache2 2026-10-02T23:25:37.337604+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23918 UBUNTU-CVE-2026-23918 2026-10-02T23:25:37.337625+00:00

Affected: Ubuntu:26.04:LTS: apache2

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1354 WID-SEC-W-2026-1354 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-02T23:25:37.337642+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.