Vulnerability-Lookup

OPENSUSE-SU-2026:10785-1

Vulnerability from csaf_opensuse - Published: 2026-05-16 00:00 - Updated: 2026-05-16 00:00

Summary

apache2-2.4.67-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: apache2-2.4.67-1.1 on GA media

Description of the patch: These are all security issues fixed in the apache2-2.4.67-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-10785

CVE-2026-23918

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-24072

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-28780

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-29168

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-29169

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-33006

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-33007

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-33523

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-33857

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-34032

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-34059

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64	—	Vendor Fix

Threats

Impact important

References

35 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-23918/	self
https://www.suse.com/security/cve/CVE-2026-24072/	self
https://www.suse.com/security/cve/CVE-2026-28780/	self
https://www.suse.com/security/cve/CVE-2026-29168/	self
https://www.suse.com/security/cve/CVE-2026-29169/	self
https://www.suse.com/security/cve/CVE-2026-33006/	self
https://www.suse.com/security/cve/CVE-2026-33007/	self
https://www.suse.com/security/cve/CVE-2026-33523/	self
https://www.suse.com/security/cve/CVE-2026-33857/	self
https://www.suse.com/security/cve/CVE-2026-34032/	self
https://www.suse.com/security/cve/CVE-2026-34059/	self
https://www.suse.com/security/cve/CVE-2026-23918	external
https://bugzilla.suse.com/1263957	external
https://www.suse.com/security/cve/CVE-2026-24072	external
https://bugzilla.suse.com/1263935	external
https://www.suse.com/security/cve/CVE-2026-28780	external
https://bugzilla.suse.com/1264163	external
https://www.suse.com/security/cve/CVE-2026-29168	external
https://bugzilla.suse.com/1264150	external
https://www.suse.com/security/cve/CVE-2026-29169	external
https://bugzilla.suse.com/1263956	external
https://www.suse.com/security/cve/CVE-2026-33006	external
https://bugzilla.suse.com/1263955	external
https://www.suse.com/security/cve/CVE-2026-33007	external
https://bugzilla.suse.com/1263954	external
https://www.suse.com/security/cve/CVE-2026-33523	external
https://bugzilla.suse.com/1263953	external
https://www.suse.com/security/cve/CVE-2026-33857	external
https://bugzilla.suse.com/1263952	external
https://www.suse.com/security/cve/CVE-2026-34032	external
https://bugzilla.suse.com/1263951	external
https://www.suse.com/security/cve/CVE-2026-34059	external
https://bugzilla.suse.com/1263950	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "apache2-2.4.67-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the apache2-2.4.67-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10785",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10785-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23918 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24072 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24072/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-28780 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-28780/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29168 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29169 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29169/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33006 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33006/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33007 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33007/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33523 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33523/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33857 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33857/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34032 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34032/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34059 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34059/"
      }
    ],
    "title": "apache2-2.4.67-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-05-16T00:00:00Z",
      "generator": {
        "date": "2026-05-16T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10785-1",
      "initial_release_date": "2026-05-16T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-05-16T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.aarch64",
                "product": {
                  "name": "apache2-2.4.67-1.1.aarch64",
                  "product_id": "apache2-2.4.67-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.ppc64le",
                "product": {
                  "name": "apache2-2.4.67-1.1.ppc64le",
                  "product_id": "apache2-2.4.67-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.s390x",
                "product": {
                  "name": "apache2-2.4.67-1.1.s390x",
                  "product_id": "apache2-2.4.67-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.x86_64",
                "product": {
                  "name": "apache2-2.4.67-1.1.x86_64",
                  "product_id": "apache2-2.4.67-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64"
        },
        "product_reference": "apache2-2.4.67-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le"
        },
        "product_reference": "apache2-2.4.67-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x"
        },
        "product_reference": "apache2-2.4.67-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        },
        "product_reference": "apache2-2.4.67-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-23918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23918",
          "url": "https://www.suse.com/security/cve/CVE-2026-23918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263957 for CVE-2026-23918",
          "url": "https://bugzilla.suse.com/1263957"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23918"
    },
    {
      "cve": "CVE-2026-24072",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24072"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24072",
          "url": "https://www.suse.com/security/cve/CVE-2026-24072"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263935 for CVE-2026-24072",
          "url": "https://bugzilla.suse.com/1263935"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-24072"
    },
    {
      "cve": "CVE-2026-28780",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-28780"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.\nIf mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-28780",
          "url": "https://www.suse.com/security/cve/CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264163 for CVE-2026-28780",
          "url": "https://bugzilla.suse.com/1264163"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-28780"
    },
    {
      "cve": "CVE-2026-29168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server\u0027s   mod_md via OCSP response data.\n\nThis issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29168",
          "url": "https://www.suse.com/security/cve/CVE-2026-29168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264150 for CVE-2026-29168",
          "url": "https://bugzilla.suse.com/1264150"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-29168"
    },
    {
      "cve": "CVE-2026-29169",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29169"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.\n\nThe only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29169",
          "url": "https://www.suse.com/security/cve/CVE-2026-29169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263956 for CVE-2026-29169",
          "url": "https://bugzilla.suse.com/1263956"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-29169"
    },
    {
      "cve": "CVE-2026-33006",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33006"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33006",
          "url": "https://www.suse.com/security/cve/CVE-2026-33006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263955 for CVE-2026-33006",
          "url": "https://bugzilla.suse.com/1263955"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33006"
    },
    {
      "cve": "CVE-2026-33007",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33007"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33007",
          "url": "https://www.suse.com/security/cve/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263954 for CVE-2026-33007",
          "url": "https://bugzilla.suse.com/1263954"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33007"
    },
    {
      "cve": "CVE-2026-33523",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33523"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.\n\nThis issue affects Apache HTTP Server: from through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33523",
          "url": "https://www.suse.com/security/cve/CVE-2026-33523"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263953 for CVE-2026-33523",
          "url": "https://bugzilla.suse.com/1263953"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33523"
    },
    {
      "cve": "CVE-2026-33857",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33857"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out-of-bounds Read vulnerability in mod_proxy_ajp of \n\nApache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33857",
          "url": "https://www.suse.com/security/cve/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263952 for CVE-2026-33857",
          "url": "https://bugzilla.suse.com/1263952"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33857"
    },
    {
      "cve": "CVE-2026-34032",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34032"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34032",
          "url": "https://www.suse.com/security/cve/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263951 for CVE-2026-34032",
          "url": "https://bugzilla.suse.com/1263951"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34032"
    },
    {
      "cve": "CVE-2026-34059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer Over-read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34059",
          "url": "https://www.suse.com/security/cve/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263950 for CVE-2026-34059",
          "url": "https://bugzilla.suse.com/1263950"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34059"
    }
  ]
}

CVE-2026-23918 (GCVE-0-2026-23918)

Vulnerability from cvelistv5 – Published: 2026-05-04 14:44 – Updated: 2026-05-05 03:56

Title

Apache HTTP Server: http2: double free and possible RCE on early reset

Summary

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Severity

No CVSS data available.

CWE

CWE-415 - Double Free

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.66 (semver)

Credits

Bartlomiej Dmitruk, striga.ai Stanislaw Strzalkowski, isec.pl

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-23918",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-05T03:56:10.684Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:35.852Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/19"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "2.4.66",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Bartlomiej Dmitruk, striga.ai"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Stanislaw Strzalkowski, isec.pl"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eDouble Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.67, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "important"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-415",
              "description": "CWE-415 Double Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T14:44:28.513Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-12-10T14:02:00.000Z",
          "value": "reported in PR 69899"
        },
        {
          "lang": "en",
          "time": "2025-12-11T14:03:00.000Z",
          "value": "fixed in r1930444, r1930796"
        }
      ],
      "title": "Apache HTTP Server: http2: double free and possible RCE on early reset",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-23918",
    "datePublished": "2026-05-04T14:44:28.513Z",
    "dateReserved": "2026-01-19T13:00:21.720Z",
    "dateUpdated": "2026-05-05T03:56:10.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-24072 (GCVE-0-2026-24072)

Vulnerability from cvelistv5 – Published: 2026-05-04 12:37 – Updated: 2026-05-05 03:56

Title

Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr

Summary

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

Severity

No CVSS data available.

CWE

CWE-269 - Improper Privilege Management

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.66 (semver)

Credits

y7syeu

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:36.948Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/18"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-24072",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-05T03:56:09.568Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "y7syeu"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\u003cbr\u003e\u003cbr\u003eUsers are recommended to upgrade to version 2.4.67, which fixes this issue."
            }
          ],
          "value": "An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T12:37:57.673Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-01-20T08:40:00.000Z",
          "value": "Report received"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1933350"
        }
      ],
      "title": "Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-24072",
    "datePublished": "2026-05-04T12:37:57.673Z",
    "dateReserved": "2026-01-21T12:37:38.184Z",
    "dateUpdated": "2026-05-05T03:56:09.568Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28780 (GCVE-0-2026-28780)

Vulnerability from cvelistv5 – Published: 2026-05-05 21:29 – Updated: 2026-05-06 15:50

Title

Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()

Summary

Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Severity

No CVSS data available.

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.66 (semver)

Credits

Andrew Lacambra Elhanan Haenel Tianshuo Han (<hantianshuo233@gmail.com>) Tristan Madani

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-05T22:24:30.623Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/05/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-28780",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-06T15:49:38.049896Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-06T15:50:18.682Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Andrew Lacambra"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Elhanan Haenel"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Tianshuo Han (\u003chantianshuo233@gmail.com\u003e)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Tristan Madani"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eHeap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.\u003cbr\u003eIf mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: through 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.67, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.\nIf mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-05T21:29:41.527Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-02-04T12:00:00.000Z",
          "value": "reported"
        },
        {
          "lang": "en",
          "time": "2026-03-18T12:00:00.000Z",
          "value": "reported by 3rd finder"
        },
        {
          "lang": "en",
          "time": "2026-02-28T12:00:00.000Z",
          "value": "reported by 2nd finder"
        }
      ],
      "title": "Apache HTTP Server: buffer overflow in mod_proxy_ajp via  ajp_msg_check_header()",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-28780",
    "datePublished": "2026-05-05T21:29:41.527Z",
    "dateReserved": "2026-03-03T12:31:23.999Z",
    "dateUpdated": "2026-05-06T15:50:18.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-29168 (GCVE-0-2026-29168)

Vulnerability from cvelistv5 – Published: 2026-05-05 13:10 – Updated: 2026-05-05 16:31

Title

Apache HTTP Server: mod_md unrestricted OCSP response

Summary

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Severity

No CVSS data available.

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.30 , ≤ 2.4.66 (semver) cpe:2.3:a:apache:http_server::::::::

Credits

Pavel Kohout, Aisle Research, Aisle.com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-29168",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-05T15:34:50.597190Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-05T15:34:58.659Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-05T16:31:49.391Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/05/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "2.4.30",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pavel Kohout, Aisle Research, Aisle.com"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAllocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server\u0027s\u0026nbsp; mod_md via OCSP response data.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.67, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server\u0027s\u00a0 mod_md via OCSP response data.\n\nThis issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-05T13:10:05.656Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-02T12:00:00.000Z",
          "value": "reported"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1933352"
        }
      ],
      "title": "Apache HTTP Server: mod_md unrestricted OCSP response",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-29168",
    "datePublished": "2026-05-05T13:10:05.656Z",
    "dateReserved": "2026-03-04T11:48:34.053Z",
    "dateUpdated": "2026-05-05T16:31:49.391Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-29169 (GCVE-0-2026-29169)

Vulnerability from cvelistv5 – Published: 2026-05-04 14:48 – Updated: 2026-05-05 20:23

Title

Apache HTTP Server: mod_dav_lock indirect lock crash

Summary

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs. The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0. Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.

Severity

No CVSS data available.

CWE

CWE-476 - NULL Pointer Dereference

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.66 (semver)

Credits

Pavel Kohout, Aisle Research, Aisle.com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-29169",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T15:52:40.756863Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-04T15:53:03.670Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-05T20:23:49.062Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/20"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/05/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pavel Kohout, Aisle Research, Aisle.com"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.\u003cbr\u003e\u003cbr\u003eThe only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.\u003cbr\u003e\u003cbr\u003eUsers are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.\u003cbr\u003e"
            }
          ],
          "value": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.\n\nThe only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T14:48:29.832Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-04T11:46:00.000Z",
          "value": "Report received"
        },
        {
          "lang": "eng",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "2.4.67 released"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1933354"
        }
      ],
      "title": "Apache HTTP Server: mod_dav_lock indirect lock crash",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-29169",
    "datePublished": "2026-05-04T14:48:29.832Z",
    "dateReserved": "2026-03-04T11:50:32.014Z",
    "dateUpdated": "2026-05-05T20:23:49.062Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33006 (GCVE-0-2026-33006)

Vulnerability from cvelistv5 – Published: 2026-05-04 14:42 – Updated: 2026-05-04 18:23

Title

Apache HTTP Server: mod_auth_digest timing attack

Summary

A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

Severity

No CVSS data available.

CWE

CWE-208 - Observable Timing Discrepancy

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.66 (semver)

Credits

Nitescu Lucian

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:47.129Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/21"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.8,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33006",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T15:12:29.723872Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-04T18:23:55.292Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Nitescu Lucian"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.\u003cbr\u003e\u003cbr\u003eUsers are recommended to upgrade to version 2.4.67, which fixes this issue."
            }
          ],
          "value": "A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-208",
              "description": "CWE-208 Observable Timing Discrepancy",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T14:42:03.473Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-09T09:08:00.000Z",
          "value": "Report received"
        },
        {
          "lang": "eng",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "2.4.67 released"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1933356"
        }
      ],
      "title": "Apache HTTP Server: mod_auth_digest timing attack",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-33006",
    "datePublished": "2026-05-04T14:42:03.473Z",
    "dateReserved": "2026-03-17T16:42:48.946Z",
    "dateUpdated": "2026-05-04T18:23:55.292Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33007 (GCVE-0-2026-33007)

Vulnerability from cvelistv5 – Published: 2026-05-04 14:41 – Updated: 2026-05-05 15:07

Title

Apache HTTP Server: mod_authn_socache crash

Summary

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

Severity

No CVSS data available.

CWE

CWE-476 - NULL Pointer Dereference

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.0 , ≤ 2.4.66 (semver)

Credits

Pavel Kohout, Aisle Research, Aisle.com Arkadi Vainbrand

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33007",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T15:13:12.273045Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-04T15:13:14.598Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:48.215Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/22"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "2.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pavel Kohout, Aisle Research, Aisle.com"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Arkadi Vainbrand"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.\u003cbr\u003e\u003cbr\u003eUsers are recommended to upgrade to version 2.4.67, which fixes this issue."
            }
          ],
          "value": "A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-05T15:07:42.103Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-04T12:15:00.000Z",
          "value": "Report received"
        },
        {
          "lang": "eng",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "2.4.67 released"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1933358"
        }
      ],
      "title": "Apache HTTP Server: mod_authn_socache crash",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-33007",
    "datePublished": "2026-05-04T14:41:27.520Z",
    "dateReserved": "2026-03-17T16:46:05.025Z",
    "dateUpdated": "2026-05-05T15:07:42.103Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33523 (GCVE-0-2026-33523)

Vulnerability from cvelistv5 – Published: 2026-05-04 14:40 – Updated: 2026-05-04 17:32

Title

Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line

Summary

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Severity

No CVSS data available.

CWE

CWE-443 - HTTP response splitting

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.0 , ≤ 2.4.66 (semver)

Credits

Haruki Oyama (Waseda University) Merih Mengisteab Dawit Jeong

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33523",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T15:55:00.471385Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-04T15:56:35.673Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:49.282Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/23"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "2.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Haruki Oyama (Waseda University)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Merih Mengisteab"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Dawit Jeong"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eHTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: from through 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.67, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.\n\nThis issue affects Apache HTTP Server: from through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-443",
              "description": "CWE-443: HTTP response splitting",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T14:40:41.430Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-05T12:00:00.000Z",
          "value": "reported"
        },
        {
          "lang": "eng",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "2.4.67 released"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1933360"
        }
      ],
      "title": "Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-33523",
    "datePublished": "2026-05-04T14:40:41.430Z",
    "dateReserved": "2026-03-20T17:29:39.696Z",
    "dateUpdated": "2026-05-04T17:32:49.282Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33857 (GCVE-0-2026-33857)

Vulnerability from cvelistv5 – Published: 2026-05-04 13:07 – Updated: 2026-05-04 17:32

Title

Apache HTTP Server: Off-by-one OOB reads in AJP getter functions

Summary

Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Severity

No CVSS data available.

CWE

CWE-125 - Out-of-bounds Read

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.66 (semver)

Credits

Elhanan Haenel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33857",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T13:58:58.653462Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-04T13:59:45.381Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:50.362Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/15"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Elhanan Haenel"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOut-of-bounds Read vulnerability in mod_proxy_ajp of \n\nApache HTTP Server.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: through 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.67, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Out-of-bounds Read vulnerability in mod_proxy_ajp of \n\nApache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T13:07:30.753Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-20T12:00:00.000Z",
          "value": "Reported"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed by r1933341 in 2.4.x"
        }
      ],
      "title": "Apache HTTP Server: Off-by-one OOB reads in AJP getter functions",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-33857",
    "datePublished": "2026-05-04T13:07:30.753Z",
    "dateReserved": "2026-03-24T09:20:11.213Z",
    "dateUpdated": "2026-05-04T17:32:50.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-34032 (GCVE-0-2026-34032)

Vulnerability from cvelistv5 – Published: 2026-05-04 12:54 – Updated: 2026-05-04 17:32

Title

Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

Summary

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Severity

No CVSS data available.

CWE

CWE-170 - Improper Null Termination
CWE-125 - Out-of-bounds Read

Assigner

apache

References

1 reference

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.66 (semver)

Credits

Tianshuo Han (<hantianshuo233@gmail.com>) Jérôme Djouder

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-34032",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T14:05:36.659371Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-04T14:05:58.672Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:51.452Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tianshuo Han (\u003chantianshuo233@gmail.com\u003e)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "J\u00e9r\u00f4me Djouder"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: through 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.67, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-170",
              "description": "CWE-170 Improper Null Termination",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T12:54:54.383Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-01T02:27:00.000Z",
          "value": "Report received"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1933343"
        }
      ],
      "title": "Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-34032",
    "datePublished": "2026-05-04T12:54:54.383Z",
    "dateReserved": "2026-03-25T13:39:27.421Z",
    "dateUpdated": "2026-05-04T17:32:51.452Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

OPENSUSE-SU-2026:10785-1

CVE-2026-23918 (GCVE-0-2026-23918)

CVE-2026-24072 (GCVE-0-2026-24072)

CVE-2026-28780 (GCVE-0-2026-28780)

CVE-2026-29168 (GCVE-0-2026-29168)

CVE-2026-29169 (GCVE-0-2026-29169)

CVE-2026-33006 (GCVE-0-2026-33006)

CVE-2026-33007 (GCVE-0-2026-33007)

CVE-2026-33523 (GCVE-0-2026-33523)

CVE-2026-33857 (GCVE-0-2026-33857)

CVE-2026-34032 (GCVE-0-2026-34032)

Tags

Sightings

Nomenclature