Most recent entries from all

bdu:2026-06305

BELL-CVE-2026-23918

Affected: Alpaquita:23: apache2, Alpaquita:25: apache2, Alpaquita:stream: apache2

BIT-apache-2026-23918 — Apache HTTP Server: http2: double free and possible RCE on early reset

Affected: Bitnami: apache

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

This issue affects Apache HTTP Server: 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

certfr-2026-avi-0530 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu…

certfr-2026-avi-0530

cnvd-2026-21690

EUVD-2026-337474

fkie_cve-2026-23918

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

This issue affects Apache HTTP Server: 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

GHSA-p8fm-9c82-pw4g

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

This issue affects Apache HTTP Server: 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

msrc_CVE-2026-23918 — Apache HTTP Server: http2: double free and possible RCE on early reset

msrc_CVE-2026-23918

NCSC-2026-0134 — Kwetsbaarheden verholpen in Apache HTTP Server

NCSC-2026-0134

openSUSE-SU-2026:10785-1 — apache2-2.4.67-1.1 on GA media

apache2-2.4.67-1.1 on GA media

RHSA-2026:13938 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

SUSE-SU-2026:2103-1 — Security update for apache2

Security update for apache2

UBUNTU-CVE-2026-23918

Affected: Ubuntu:26.04:LTS: apache2

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

WID-SEC-W-2026-1354 — Apache HTTP Server: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.