<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/organization/eca3b982-e26f-45e2-8d6e-0a61ecaf1432/recent?tab=products</id>
  <title>Most recent vulnerabilities of Apache Software Foundation</title>
  <updated>2026-10-01T14:07:10.247797+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Vulnerabilities published under the CPE names of the products of Apache Software Foundation.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-34486</id>
    <title>CVE-2026-34486</title>
    <updated>2026-09-21T19:43:41.203000+00:00</updated>
    <content>Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-34486"/>
    <summary>Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor</summary>
    <published>2026-04-09T19:35:35.994000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-68569</id>
    <title>CVE-2026-68569</title>
    <updated>2026-09-21T11:06:13.066000+00:00</updated>
    <content>Apache Tomcat: Principal lookup can fail open in some cases</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-68569"/>
    <summary>Apache Tomcat: Principal lookup can fail open in some cases</summary>
    <published>2026-08-25T21:59:17.438000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-41293</id>
    <title>CVE-2026-41293</title>
    <updated>2026-09-17T18:37:24.561000+00:00</updated>
    <content>Apache Tomcat: HTTP/2 request headers not validated</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-41293"/>
    <summary>Apache Tomcat: HTTP/2 request headers not validated</summary>
    <published>2026-05-12T15:19:35.179000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-28780</id>
    <title>CVE-2026-28780</title>
    <updated>2026-09-14T12:04:33.013000+00:00</updated>
    <content>Apache HTTP Server: buffer overflow in mod_proxy_ajp via  ajp_msg_check_header()</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-28780"/>
    <summary>Apache HTTP Server: buffer overflow in mod_proxy_ajp via  ajp_msg_check_header()</summary>
    <published>2026-05-05T21:29:41.527000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-42536</id>
    <title>CVE-2026-42536</title>
    <updated>2026-09-14T12:04:32.084000+00:00</updated>
    <content>Apache HTTP Server: mod_xml2enc heap overflow</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-42536"/>
    <summary>Apache HTTP Server: mod_xml2enc heap overflow</summary>
    <published>2026-06-08T15:23:46.290000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-44185</id>
    <title>CVE-2026-44185</title>
    <updated>2026-09-14T12:04:28.422000+00:00</updated>
    <content>Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-44185"/>
    <summary>Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`</summary>
    <published>2026-06-08T15:22:11.809000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-34355</id>
    <title>CVE-2026-34355</title>
    <updated>2026-09-14T12:04:27.406000+00:00</updated>
    <content>Apache HTTP Server: mod_proxy_html buffer overflow</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-34355"/>
    <summary>Apache HTTP Server: mod_proxy_html buffer overflow</summary>
    <published>2026-06-08T15:20:30.900000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-66755</id>
    <title>CVE-2026-66755</title>
    <updated>2026-09-01T12:05:18.862000+00:00</updated>
    <content>Apache Tika: Arbitrary Local File Read in ISArchiveParser</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-66755"/>
    <summary>Apache Tika: Arbitrary Local File Read in ISArchiveParser</summary>
    <published>2026-07-30T19:16:42.370000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-66422</id>
    <title>CVE-2026-66422</title>
    <updated>2026-08-26T18:52:26.487000+00:00</updated>
    <content>Apache Tomcat: Servlet role references can bypass declarative role constraints</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-66422"/>
    <summary>Apache Tomcat: Servlet role references can bypass declarative role constraints</summary>
    <published>2026-08-25T21:55:16.928000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-68525</id>
    <title>CVE-2026-68525</title>
    <updated>2026-08-26T18:40:55.312000+00:00</updated>
    <content>Apache Tomcat: Redirect after FORM auth may bypass method specific constraints</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-68525"/>
    <summary>Apache Tomcat: Redirect after FORM auth may bypass method specific constraints</summary>
    <published>2026-08-25T21:57:18.557000+00:00</published>
  </entry>
</feed>
