Apache Http Server
Apache · 144 CVEs
Apache HTTP Server: mod_dav_fs namespace overflow
Oct 1, 2026
Apache HTTP Server: mod_userdir information disclosure
Oct 1, 2026
Apache HTTP Server: mod_auth_digest DoS attack
Oct 1, 2026
Apache HTTP Server: mod_auth_digest one-time-nonce replay attack
Oct 1, 2026
Apache HTTP Server: mod_xml2enc crash on charset conversion failure
Oct 1, 2026
Apache HTTP Server: mod_vhost_alias stack overflow
Oct 1, 2026
Apache HTTP Server: mod_proxy_ftp PASV address handling
Oct 1, 2026
Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
Oct 1, 2026
Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
Oct 1, 2026
Apache HTTP Server: mod_dav_fs property database read access
Oct 1, 2026
Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy
Oct 1, 2026
Apache HTTP Server: mod_proxy_html: crash in dump_content
Oct 1, 2026
Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}
Oct 1, 2026
Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
Oct 1, 2026
Apache HTTP Server: mod_auth_digest reauthentication attack
Oct 1, 2026
Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
Oct 1, 2026
Apache HTTP Server: mod_heartmonitor denial of service
Oct 1, 2026
Apache HTTP Server: mod_dav shared lock overflow
Oct 1, 2026
Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
Oct 1, 2026
Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling
Oct 1, 2026
Apache HTTP Server: mod_http2 denial of service
Jun 8, 2026
Apache HTTP Server: mod_http2 memory corruption when file handles exhausted
Jun 8, 2026
Apache HTTP Server: mod_xml2enc heap overflow
Jun 8, 2026
Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
Jun 8, 2026
Apache HTTP Server: mod_proxy_html buffer overflow
Jun 8, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-93546 | Apache HTTP Server: mod_dav_fs namespace overflow | HIGH | 0.34% | Oct 1, 2026 |
| CVE-2026-79768 | Apache HTTP Server: mod_userdir information disclosure | MEDIUM | 0.32% | Oct 1, 2026 |
| CVE-2026-73637 | Apache HTTP Server: mod_auth_digest DoS attack | HIGH | 0.26% | Oct 1, 2026 |
| CVE-2026-73636 | Apache HTTP Server: mod_auth_digest one-time-nonce replay attack | HIGH | 0.37% | Oct 1, 2026 |
| CVE-2026-63686 | Apache HTTP Server: mod_xml2enc crash on charset conversion failure | HIGH | 0.33% | Oct 1, 2026 |
| CVE-2026-63292 | Apache HTTP Server: mod_vhost_alias stack overflow | HIGH | 0.58% | Oct 1, 2026 |
| CVE-2026-63045 | Apache HTTP Server: mod_proxy_ftp PASV address handling | HIGH | 0.33% | Oct 1, 2026 |
| CVE-2026-59797 | Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function | CRITICAL | 0.39% | Oct 1, 2026 |
| CVE-2026-59685 | Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM | HIGH | 0.34% | Oct 1, 2026 |
| CVE-2026-58415 | Apache HTTP Server: mod_dav_fs property database read access | MEDIUM | 0.30% | Oct 1, 2026 |
| CVE-2026-57941 | Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy | CRITICAL | 0.44% | Oct 1, 2026 |
| CVE-2026-56449 | Apache HTTP Server: mod_proxy_html: crash in dump_content | HIGH | 0.42% | Oct 1, 2026 |
| CVE-2026-56154 | Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} | CRITICAL | 0.42% | Oct 1, 2026 |
| CVE-2026-56153 | Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char | HIGH | 0.50% | Oct 1, 2026 |
| CVE-2026-48005 | Apache HTTP Server: mod_auth_digest reauthentication attack | HIGH | 0.61% | Oct 1, 2026 |
| CVE-2026-47360 | Apache HTTP Server: mod_session: Session cookie not removed during internal redirect | HIGH | 0.39% | Oct 1, 2026 |
| CVE-2026-46729 | Apache HTTP Server: mod_heartmonitor denial of service | HIGH | 0.47% | Oct 1, 2026 |
| CVE-2026-42528 | Apache HTTP Server: mod_dav shared lock overflow | MEDIUM | 0.42% | Oct 1, 2026 |
| CVE-2026-42356 | Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories | LOW | 0.47% | Oct 1, 2026 |
| CVE-2026-63718 | Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling | HIGH | 0.32% | Oct 1, 2026 |
| CVE-2026-49975 | Apache HTTP Server: mod_http2 denial of service | HIGH | 4.17% | Jun 8, 2026 |
| CVE-2026-48913 | Apache HTTP Server: mod_http2 memory corruption when file handles exhausted | HIGH | 1.07% | Jun 8, 2026 |
| CVE-2026-42536 | Apache HTTP Server: mod_xml2enc heap overflow | HIGH | 2.69% | Jun 8, 2026 |
| CVE-2026-44185 | Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` | HIGH | 1.75% | Jun 8, 2026 |
| CVE-2026-34355 | Apache HTTP Server: mod_proxy_html buffer overflow | HIGH | 2.66% | Jun 8, 2026 |
Showing 1 to 25 of 144 CVEs