https://vulnerability.circl.lu/sightings/feed 2026-05-06T18:42:55.363621+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bc1363ca-ac5b-4311-9a77-6a0ef0b48d4a/export 2026-05-06T18:42:55.369283+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "bc1363ca-ac5b-4311-9a77-6a0ef0b48d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ml6nhmzv4m2x", "content": "Apache HTTP Server Fix Release for Critical HTTP/2 Double-Free Vulnerability CVE-2026-23918 +\u00a0Video\n\nIntroduction A critical security flaw has been identified and patched in the Apache HTTP Server, one of the most widely used web server platforms in the world. The vulnerability, tracked as\u2026", "creation_timestamp": "2026-05-06T11:56:39.551655Z"} 2026-05-06T11:56:39.551655+00:00 https://vulnerability.circl.lu/sighting/0c8b9e6a-2213-49a7-ab06-68941dc06418/export 2026-05-06T18:42:55.369208+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "0c8b9e6a-2213-49a7-ab06-68941dc06418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3ml6ojqdvsl2x", "content": "Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-05-06T12:15:43.959368Z"} 2026-05-06T12:15:43.959368+00:00 https://vulnerability.circl.lu/sighting/79270e53-b9f7-450b-8e69-021a5d2abc5e/export 2026-05-06T18:42:55.369134+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "79270e53-b9f7-450b-8e69-021a5d2abc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/tychotithonus.infosec.exchange.ap.brid.gy/post/3ml6paounyt72", "content": "@Andres4NY Parent post updated, apparently CVE-2026-23918 was fixed much earlier?", "creation_timestamp": "2026-05-06T12:32:34.821340Z"} 2026-05-06T12:32:34.821340+00:00 https://vulnerability.circl.lu/sighting/51c5b0df-c039-490c-95bd-7fc7a819c6d1/export 2026-05-06T18:42:55.369053+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "51c5b0df-c039-490c-95bd-7fc7a819c6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116527808438415469", "content": "\ud83d\udcf0 Critical RCE Flaw in Apache HTTP Server's HTTP/2 Module Patched\n\ud83d\udea8 CRITICAL APACHE FLAW: A double-free bug (CVE-2026-23918) in Apache HTTP Server's http2 module allows for DoS and potential RCE. A PoC exploit exists. Upgrade to version 2.4.67 immediately! #Apache #CyberSecurity #Vulnerability #RCE\n\ud83d\udd17 https://cyber.netsecops.io", "creation_timestamp": "2026-05-06T13:14:09.984538Z"} 2026-05-06T13:14:09.984538+00:00 https://vulnerability.circl.lu/sighting/a5a0efcf-d068-4aa9-a6f0-b0b6b67f14a5/export 2026-05-06T18:42:55.368959+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "a5a0efcf-d068-4aa9-a6f0-b0b6b67f14a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3ml6rsyjmiu2e", "content": "\ud83d\udea8 CRITICAL APACHE FLAW: A double-free bug (CVE-2026-23918) in Apache HTTP Server's http2 module allows for DoS and potential RCE. A PoC exploit exists. Upgrade to version 2.4.67 immediately! #Apache #CyberSecurity #Vulnerability #RCE", "creation_timestamp": "2026-05-06T13:14:36.342561Z"} 2026-05-06T13:14:36.342561+00:00 https://vulnerability.circl.lu/sighting/46df45e6-85d8-4e12-b41b-58a26ed1468e/export 2026-05-06T18:42:55.368877+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "46df45e6-85d8-4e12-b41b-58a26ed1468e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3ml6t6tdfu22z", "content": "\u26a0\ufe0f CVE-2026-23918: Double free in Apache HTTP Server 2.4.66 HTTP/2 may allow unauth RCE via crafted requests, risking full server compromise. Update to 2.4.67 or disable HTTP/2/restrict access. Query: web.headers=\"Server: Apache/2.4.66\"\u00a0\n\nThe platform: magnify.modat.io", "creation_timestamp": "2026-05-06T13:39:13.238213Z"} 2026-05-06T13:39:13.238213+00:00 https://vulnerability.circl.lu/sighting/bbe8bb5b-c6e5-4282-a8c5-9ac03b747b10/export 2026-05-06T18:42:55.368795+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "bbe8bb5b-c6e5-4282-a8c5-9ac03b747b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ml6vqyt6472y", "content": "Critical #Apache HTTP/2 flaw (CVE-2026-23918) enables DoS and potential RCE. Update to version 2.4.67 immediately to secure your servers. #CyberSecurity #Vulnerability #HTTP2 Link: thedailytechfeed.com/critical-apa...", "creation_timestamp": "2026-05-06T14:25:05.328348Z"} 2026-05-06T14:25:05.328348+00:00 https://vulnerability.circl.lu/sighting/f0efb4ea-29b0-43aa-b6c9-0ef575ea4bfd/export 2026-05-06T18:42:55.368695+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "f0efb4ea-29b0-43aa-b6c9-0ef575ea4bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://t.me/bdufstecru/3136", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP/2 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache HTTP Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-06305\nCVE-2026-23918\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://httpd.apache.org/security/vulnerabilities_24.html\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043a\u043e\u043b\u0430 HTTP/2 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 (httpd.conf) \u0438\u043b\u0438 \u0432\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435.", "creation_timestamp": "2026-05-06T15:27:47.000000Z"} 2026-05-06T15:27:47+00:00 https://vulnerability.circl.lu/sighting/e24b599d-e23d-420a-a6ca-ee39833b346d/export 2026-05-06T18:42:55.368577+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "e24b599d-e23d-420a-a6ca-ee39833b346d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3ml77eelrlk2a", "content": "Vulnerabilidad cr\u00edtica en Apache expone a millones de servidores a ataques RCE.\n\nSe ha parchado una vulnerabilidad grave (CVE-2026-23918) que permite la Ejecuci\u00f3n Remota de C\u00f3digo (RCE) aprovechando un fallo en HTTP/2. #ciberseguridad #cybersecurity\nwww.linkedin.com/pulse/vulner...", "creation_timestamp": "2026-05-06T17:17:00.872389Z"} 2026-05-06T17:17:00.872389+00:00 https://vulnerability.circl.lu/sighting/15b37892-eb96-45ed-90cf-cb7b00d3c629/export 2026-05-06T18:42:55.367182+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "15b37892-eb96-45ed-90cf-cb7b00d3c629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ml7bvy6m6s2g", "content": "Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE\n\nThe Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including a severe vulnerability that could potentially lead to remote cod\u2026\n#hackernews #news", "creation_timestamp": "2026-05-06T18:02:35.537468Z"} 2026-05-06T18:02:35.537468+00:00