https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:22:54.265757+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06310 bdu:2026-06310 2026-10-04T16:22:54.297336+00:00 bdu:2026-06310 https://cve.radiocsirt.org/vuln/bell-cve-2026-33523 BELL-CVE-2026-33523 2026-10-04T16:22:54.297383+00:00

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

 https://cve.radiocsirt.org/vuln/bit-apache-2026-33523 BIT-apache-2026-33523 — Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line 2026-10-04T16:22:54.297427+00:00

Affected: Bitnami: apache

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.

This issue affects Apache HTTP Server: from through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0530 certfr-2026-avi-0530 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-04T16:22:54.297470+00:00 certfr-2026-avi-0530 https://cve.radiocsirt.org/vuln/cnvd-2026-21694 cnvd-2026-21694 2026-10-04T16:22:54.297497+00:00 cnvd-2026-21694 https://cve.radiocsirt.org/vuln/euvd-2026-308417 EUVD-2026-308417 2026-10-04T16:22:54.297516+00:00 EUVD-2026-308417 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33523 fkie_cve-2026-33523 2026-10-04T16:22:54.297539+00:00

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.

This issue affects Apache HTTP Server: from through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-fc75-39v4-qm5p GHSA-fc75-39v4-qm5p 2026-10-04T16:22:54.297581+00:00

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.

This issue affects Apache HTTP Server: from through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/jvndb-2026-026853 jvndb-2026-026853 2026-10-04T16:22:54.297601+00:00

Vulnerability(CVE-2026-33523) has been found in Cosminexus HTTP Server and Hitachi Web Server.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-33523 msrc_CVE-2026-33523 — Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line 2026-10-04T16:22:54.297618+00:00 msrc_CVE-2026-33523 https://cve.radiocsirt.org/vuln/ncsc-2026-0134 NCSC-2026-0134 — Kwetsbaarheden verholpen in Apache HTTP Server 2026-10-04T16:22:54.297635+00:00 NCSC-2026-0134 https://cve.radiocsirt.org/vuln/oesa-2026-2320 OESA-2026-2320 — httpd security update 2026-10-04T16:22:54.297664+00:00

Affected: openEuler:24.03-LTS-SP1: httpd

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es):

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

Users are recommended to upgrade to version 2.4.67, which fixes this issue.(CVE-2026-24072)

Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.

This issue affects Apache HTTP Server: through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.(CVE-2026-28780)

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's  mod_md via OCSP response data.

This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.(CVE-2026-29168)

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.

The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.

Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10785-1 openSUSE-SU-2026:10785-1 — apache2-2.4.67-1.1 on GA media 2026-10-04T16:22:54.297709+00:00

apache2-2.4.67-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:17080 RHSA-2026:17080 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-04T16:22:54.297731+00:00

httpd: NULL pointer dereference via specially crafted request httpd: mod_auth_digest: timing attack allows a bypass of digest authentication httpd: HTTP response splitting forwarding malicious status line

 https://cve.radiocsirt.org/vuln/suse-su-2026:2103-1 SUSE-SU-2026:2103-1 — Security update for apache2 2026-10-04T16:22:54.297750+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33523 UBUNTU-CVE-2026-33523 2026-10-04T16:22:54.297768+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:25.10: apache2, Ubuntu:26.04:LTS: apache2

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1354 WID-SEC-W-2026-1354 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-04T16:22:54.297796+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.