https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T23:51:14.796629+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1248 certfr-2026-avi-1248 — De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaqu… 2026-10-02T23:51:14.820409+00:00 certfr-2026-avi-1248 https://db.gcve.eu/vuln/fkie_cve-2026-79768 fkie_cve-2026-79768 2026-10-02T23:51:14.820509+00:00

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir)

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

 https://db.gcve.eu/vuln/ghsa-cr6f-pjrc-7rw2 GHSA-cr6f-pjrc-7rw2 2026-10-02T23:51:14.820575+00:00

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir)

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

 https://db.gcve.eu/vuln/rhsa-2026:74858 RHSA-2026:74858 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T23:51:14.820606+00:00

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

 https://db.gcve.eu/vuln/ubuntu-cve-2026-79768 UBUNTU-CVE-2026-79768 2026-10-02T23:51:14.820687+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:26.04:LTS: apache2

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.