Most recent entries from all

certfr-2026-avi-1500 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu…

2026-11-13T08:08:46.116263+00:00

certfr-2026-avi-1500

fkie_cve-2026-119618

2026-11-13T08:08:46.116330+00:00

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.

This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42.

GHSA-hjhf-gpg9-qqfj

2026-11-13T08:08:46.116382+00:00

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.

This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42.

NCSC-2026-0484 — Kwetsbaarheid verholpen in Apache HTTP Server

2026-11-13T08:08:46.116408+00:00

NCSC-2026-0484

RHSA-2026:98953 — Red Hat Security Advisory: mod_http2 security update

2026-11-13T08:08:46.116435+00:00

httpd: Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy httpd:2.4/mod_http2: mod_http2: httpd: Remote code execution in mod_http2

UBUNTU-CVE-2026-119618

2026-11-13T08:08:46.116464+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:26.10: apache2, Ubuntu:26.04:LTS: apache2

mod_http2: heap corruption and RCE in assign_headers

WID-SEC-W-2026-4517 — Apache HTTP Server: Mehrere Schwachstellen

2026-11-13T08:08:46.116507+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Programmcode auszuführen.