{"uuid": "eb3266d6-8357-42e3-a84b-a97153309f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/116527208469343364", "content": "#Debian stable #apache2 package 2.4.66-1~deb13u2 already includes the fix for CVE-2026-23918.\nYou an verify this by apt-source apache2and then checking out apache2-2.4.66/debian/patches/bug1125368.patch\nThe security tracker at https://security-tracker.debian.org/tracker/CVE-2026-23918 currently has wrong information. This is likely due to automation based on version numbers alone.\n#CVE_2026_23918", "creation_timestamp": "2026-05-06T10:41:35.024766Z"}