https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:39:57.312731+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:21391 ALSA-2026:21391 — Important: httpd security update 2026-10-03T03:39:57.849226+00:00

Affected: AlmaLinux:9: httpd, AlmaLinux:9: httpd-core, AlmaLinux:9: httpd-devel, AlmaLinux:9: httpd-filesystem, AlmaLinux:9: httpd-manual, AlmaLinux:9: httpd-tools, AlmaLinux:9: mod_ldap, AlmaLinux:9: mod_lua, AlmaLinux:9: mod_proxy_html, AlmaLinux:9: mod_session and 1 more

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007) * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-06349 bdu:2026-06349 2026-10-03T03:39:57.849326+00:00 bdu:2026-06349 https://cve.radiocsirt.org/vuln/bell-cve-2026-34032 BELL-CVE-2026-34032 2026-10-03T03:39:57.849345+00:00

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

 https://cve.radiocsirt.org/vuln/bit-apache-2026-34032 BIT-apache-2026-34032 — Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string) 2026-10-03T03:39:57.849368+00:00

Affected: Bitnami: apache

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0530 certfr-2026-avi-0530 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-03T03:39:57.849390+00:00 certfr-2026-avi-0530 https://cve.radiocsirt.org/vuln/cnvd-2026-21697 cnvd-2026-21697 2026-10-03T03:39:57.849407+00:00 cnvd-2026-21697 https://cve.radiocsirt.org/vuln/euvd-2026-308419 EUVD-2026-308419 2026-10-03T03:39:57.849419+00:00 EUVD-2026-308419 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34032 fkie_cve-2026-34032 2026-10-03T03:39:57.849429+00:00

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-9r79-gvhp-cr42 GHSA-9r79-gvhp-cr42 2026-10-03T03:39:57.849451+00:00

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34032 msrc_CVE-2026-34032 — Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string) 2026-10-03T03:39:57.849467+00:00 msrc_CVE-2026-34032 https://cve.radiocsirt.org/vuln/ncsc-2026-0134 NCSC-2026-0134 — Kwetsbaarheden verholpen in Apache HTTP Server 2026-10-03T03:39:57.849482+00:00 NCSC-2026-0134 https://cve.radiocsirt.org/vuln/oesa-2026-2398 OESA-2026-2398 — httpd security update 2026-10-03T03:39:57.849511+00:00

Affected: openEuler:24.03-LTS: httpd

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es):

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.

Users are recommended to upgrade to version 2.4.67, which fixes this issue.(CVE-2026-33007)

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.

This issue affects Apache HTTP Server: from through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.(CVE-2026-33523)

Out-of-bounds Read vulnerability in mod_proxy_ajp of

Apache HTTP Server.

This issue affects Apache HTTP Server: through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.(CVE-2026-33857)

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.(CVE-2026-34032)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10785-1 openSUSE-SU-2026:10785-1 — apache2-2.4.67-1.1 on GA media 2026-10-03T03:39:57.849543+00:00

apache2-2.4.67-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:13938 RHSA-2026:13938 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T03:39:57.849565+00:00

Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

 https://cve.radiocsirt.org/vuln/rlsa-2026:21391 RLSA-2026:21391 — Important: httpd security update 2026-10-03T03:39:57.849590+00:00

Affected: Rocky Linux:9: httpd

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059)

* httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032)

* httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)

* httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007)

* Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:2103-1 SUSE-SU-2026:2103-1 — Security update for apache2 2026-10-03T03:39:57.849616+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34032 UBUNTU-CVE-2026-34032 2026-10-03T03:39:57.849637+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:25.10: apache2, Ubuntu:26.04:LTS: apache2

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1354 WID-SEC-W-2026-1354 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-03T03:39:57.849667+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.