Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:19:23 +0000 CVE-2026-23918 — Apache HTTP Server: http2: double free and possible RCE on early reset https://vulnerability.circl.lu/vuln/cve-2026-23918 <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server, Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat JBoss Core Services</p> <p>Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.</p> <p>This issue affects Apache HTTP Server: 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server, Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat JBoss Core Services</p> <p>Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.</p> <p>This issue affects Apache HTTP Server: 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/cve-2026-23918