https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:59:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380887 EUVD-2026-380887 https://cve.radiocsirt.org/vuln/euvd-2026-380887 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73636 <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73636 https://cve.radiocsirt.org/vuln/ghsa-x3h4-7828-fv9v <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-x3h4-7828-fv9v