https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T23:51:15.710519+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1248 certfr-2026-avi-1248 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-02T23:51:15.734982+00:00 certfr-2026-avi-1248 https://db.gcve.eu/vuln/fkie_cve-2026-73636 fkie_cve-2026-73636 2026-10-02T23:51:15.735024+00:00

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client's shared memory entry when AuthDigestNonceLifetime is set to 0.

Users are recommended to upgrade to version 2.4.69, which fixes this issue.

 https://db.gcve.eu/vuln/ghsa-x3h4-7828-fv9v GHSA-x3h4-7828-fv9v 2026-10-02T23:51:15.735060+00:00

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client's shared memory entry when AuthDigestNonceLifetime is set to 0.

Users are recommended to upgrade to version 2.4.69, which fixes this issue.

 https://db.gcve.eu/vuln/rhsa-2026:74858 RHSA-2026:74858 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T23:51:15.735078+00:00

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

 https://db.gcve.eu/vuln/ubuntu-cve-2026-73636 UBUNTU-CVE-2026-73636 2026-10-02T23:51:15.735128+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:26.04:LTS: apache2

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client's shared memory entry when AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.