https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:45:59.155456+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2016-4979 Withdrawn: BELL-CVE-2016-4979 — CVE-2016-4979 does not affect BellSoft software 2026-10-03T19:45:59.288629+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2016-04600 cnvd-2016-04600 2026-10-03T19:45:59.288674+00:00 cnvd-2016-04600 https://cve.radiocsirt.org/vuln/euvd-2026-84850 EUVD-2026-84850 2026-10-03T19:45:59.288691+00:00 EUVD-2026-84850 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4979 fkie_cve-2016-4979 2026-10-03T19:45:59.288703+00:00

The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.

 https://cve.radiocsirt.org/vuln/ghsa-r48c-7gpg-9q4x GHSA-r48c-7gpg-9q4x 2026-10-03T19:45:59.288755+00:00

The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.

 https://cve.radiocsirt.org/vuln/gsd-2016-4979 gsd-2016-4979 2026-10-03T19:45:59.288780+00:00 gsd-2016-4979 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 openSUSE-SU-2024:10268-1 — apache2-2.4.23-4.1 on GA media 2026-10-03T19:45:59.288792+00:00

apache2-2.4.23-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:1420 RHSA-2016:1420 — Red Hat Security Advisory: httpd24-httpd security update 2026-10-03T19:45:59.288842+00:00

httpd: X509 client certificate authentication bypass using HTTP/2 HTTPD: sets environmental variable based on user supplied Proxy request header