https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:21:29 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:23732 <p><strong>Affected:</strong> AlmaLinux:8: httpd, AlmaLinux:8: httpd-devel, AlmaLinux:8: httpd-filesystem, AlmaLinux:8: httpd-manual, AlmaLinux:8: httpd-tools, AlmaLinux:8: mod_http2, AlmaLinux:8: mod_ldap, AlmaLinux:8: mod_md, AlmaLinux:8: mod_proxy_html, AlmaLinux:8: mod_session and 1 more</p> <p>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.</p> <p>Security Fix(es):</p> <p>* httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: httpd, AlmaLinux:8: httpd-devel, AlmaLinux:8: httpd-filesystem, AlmaLinux:8: httpd-manual, AlmaLinux:8: httpd-tools, AlmaLinux:8: mod_http2, AlmaLinux:8: mod_ldap, AlmaLinux:8: mod_md, AlmaLinux:8: mod_proxy_html, AlmaLinux:8: mod_session and 1 more</p> <p>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.</p> <p>Security Fix(es):</p> <p>* httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:23732 https://cve.radiocsirt.org/vuln/bdu:2025-15636 bdu:2025-15636 https://cve.radiocsirt.org/vuln/bdu:2025-15636 https://cve.radiocsirt.org/vuln/bell-cve-2025-55753 <p><strong>Affected:</strong> Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2</p> <p><strong>Affected:</strong> Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-55753 https://cve.radiocsirt.org/vuln/bit-apache-2025-55753 <p><strong>Affected:</strong> Bitnami: apache</p> <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.</p> <p>This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: apache</p> <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.</p> <p>This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-apache-2025-55753 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1071 certfr-2025-avi-1071 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1071 https://cve.radiocsirt.org/vuln/cnvd-2025-30837 cnvd-2025-30837 https://cve.radiocsirt.org/vuln/cnvd-2025-30837 https://cve.radiocsirt.org/vuln/euvd-2026-262684 EUVD-2026-262684 https://cve.radiocsirt.org/vuln/euvd-2026-262684 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55753 <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.</p> <p>This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.</p> <p>This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-55753 https://cve.radiocsirt.org/vuln/ghsa-3j5h-f552-7rhh <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.</p> <p>This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.</p> <p>This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3j5h-f552-7rhh https://cve.radiocsirt.org/vuln/msrc_cve-2025-55753 msrc_CVE-2025-55753 https://cve.radiocsirt.org/vuln/msrc_cve-2025-55753 https://cve.radiocsirt.org/vuln/ncsc-2026-0102 NCSC-2026-0102 https://cve.radiocsirt.org/vuln/ncsc-2026-0102 https://cve.radiocsirt.org/vuln/oesa-2026-1064 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: httpd</p> <p>Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es):</p> <p>An integer overflow vulnerability was found in Apache HTTP Server versions 2.4.30 to 2.4.66. In case of failed ACME certificate renewal, after a number of failures (~30 days in default configurations), the backoff timer becomes 0. Certificate renewal attempts are then repeated without delays until successful. This issue affects confidentiality, integrity, and availability.(CVE-2025-55753)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: httpd</p> <p>Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es):</p> <p>An integer overflow vulnerability was found in Apache HTTP Server versions 2.4.30 to 2.4.66. In case of failed ACME certificate renewal, after a number of failures (~30 days in default configurations), the backoff timer becomes 0. Certificate renewal attempts are then repeated without delays until successful. This issue affects confidentiality, integrity, and availability.(CVE-2025-55753)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1064 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15808-1 <p>apache2-2.4.66-1.1 on GA media</p> <p>apache2-2.4.66-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15808-1 https://cve.radiocsirt.org/vuln/rhsa-2026:0009 <p>mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...</p> <p>mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...</p> https://cve.radiocsirt.org/vuln/rhsa-2026:0009 https://cve.radiocsirt.org/vuln/suse-su-2025:4488-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:4488-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-55753 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:25.10: apache2, Ubuntu:26.04:LTS: apache2</p> <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:25.10: apache2, Ubuntu:26.04:LTS: apache2</p> <p>An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-55753 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2750 <p>Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2750