[ Vendor · 458 CVEs ]
Apache Software Foundation
CVEs affecting Apache Software Foundation published in the last 30 days, plus any Apache Software Foundation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97146 | 7 Oct 2026 | CVSS 4.8 | Apache Software Foundation Apache YuniKornApache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the… | |
| CVE-2026-92393 | 7 Oct 2026 | CVSS 2.0 | Apache Software Foundation Apache YuniKornApache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in… | |
| CVE-2026-78243 | 7 Oct 2026 | CVSS 2.1 | Apache Software Foundation Apache YuniKornApache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership… | |
| CVE-2026-93684 | 7 Oct 2026 | CVSS 5.4 | Apache Software Foundation Apache ImpalaAn SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table alias and make it run in another… | |
| CVE-2026-97720 | 7 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache ImpalaIncorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to… | |
| CVE-2026-90466 | 7 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache ImpalaPath traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a… | |
| CVE-2026-94114 | 6 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache Commons BCELSymbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested… | |
| CVE-2026-105242 | 6 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache log4netImproper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters… | Fix |
| CVE-2026-105243 | 6 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache log4netInsufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the… | Fix |
| CVE-2026-105244 | 6 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache log4netImproper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space… | Fix |
| CVE-2026-105111 | 6 Oct 2026 | CVSS 4.7 | Apache Software Foundation Apache Commons BCELImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when… | |
| CVE-2026-105239 | 6 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache log4netImproper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content… | Fix |
| CVE-2026-105240 | 6 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache log4netImproper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged… | Fix |
| CVE-2026-105241 | 6 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache log4netImproper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode… | Fix |
| CVE-2026-104711 | 5 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache StrutsImproper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache… | Fix |
| CVE-2026-104712 | 5 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache StrutsAsymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal… | Fix |
| CVE-2026-104713 | 5 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache StrutsAllocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any… | Fix |
| CVE-2026-104714 | 5 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache StrutsConcurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message… | Fix |
| CVE-2026-59265 | 2 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache OpenOfficeA code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing… | Fix |
| CVE-2026-102795 | 2 Oct 2026 | CVSS 9.3 | Apache Software Foundation Apache Traffic ServerImproper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0… | |
| CVE-2026-96277 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift… | |
| CVE-2026-96286 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftUncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to… | |
| CVE-2026-96287 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftInefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-96289 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftUncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade… | |
| CVE-2026-94658 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftInefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-94655 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue… | |
| CVE-2026-94656 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94657 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94654 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftLoop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-85476 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftLoop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-83632 | 2 Oct 2026 | CVSS 9.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This… | |
| CVE-2026-83663 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame… | |
| CVE-2026-83745 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftMemory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang… | |
| CVE-2026-66081 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftAccess of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-66331 | 2 Oct 2026 | CVSS 6.9 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport. This issue affects Apache… | |
| CVE-2026-66837 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftStack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-66858 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftThe protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields… | |
| CVE-2026-66859 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftNULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-61374 | 2 Oct 2026 | CVSS 7.1 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-63772 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-66054 | 2 Oct 2026 | CVSS 6.9 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift… | |
| CVE-2026-66055 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue… | |
| CVE-2026-94653 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftInefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-96288 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftUncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings. This issue affects… | |
| CVE-2026-96292 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftInefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache… | |
| CVE-2026-96294 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift… | |
| CVE-2026-94636 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftImproper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of… | |
| CVE-2026-94637 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftImproper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-94638 | 2 Oct 2026 | CVSS 6.3 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94646 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('prototype… | |
| CVE-2026-94648 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94652 | 2 Oct 2026 | CVSS 6.3 | Apache Software Foundation Apache ThriftMissing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-86536 | 2 Oct 2026 | CVSS 6.3 | Apache Software Foundation Apache ThriftImproperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings. This issue… | |
| CVE-2026-86537 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache Thrift D… | |
| CVE-2026-87117 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftNULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to… | |
| CVE-2026-90440 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftUncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D… | |
| CVE-2026-92834 | 2 Oct 2026 | CVSS 6.3 | Apache Software Foundation Apache ThriftUse of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift… | |
| CVE-2026-82458 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftMemory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml… | |
| CVE-2026-82459 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftInteger underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache… | |
| CVE-2026-85086 | 2 Oct 2026 | CVSS 6.9 | Apache Software Foundation Apache ThriftImproper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue… | |
| CVE-2026-85087 | 2 Oct 2026 | CVSS 6.9 | Apache Software Foundation Apache ThriftImproper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-85088 | 2 Oct 2026 | CVSS 6.9 | Apache Software Foundation Apache ThriftImproper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager… | |
| CVE-2026-86535 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftLoop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution')… | |
| CVE-2026-61373 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift… | |
| CVE-2026-96990 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94633 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftMemory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This… | |
| CVE-2026-94642 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to… | |
| CVE-2026-94644 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94645 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftImproper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability in Apache Thrift nodejs… | |
| CVE-2026-94650 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftUncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to… | |
| CVE-2026-94651 | 2 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache Thriftimproper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apache Thrift java bindings. This… | |
| CVE-2026-91135 | 2 Oct 2026 | CVSS 9.2 | Apache Software Foundation Apache ThriftHeap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it… | |
| CVE-2026-91137 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftImproper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache… | |
| CVE-2026-93925 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftStack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift… | |
| CVE-2026-93926 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftMissing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift… | |
| CVE-2026-85494 | 2 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache ThriftImproper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size… | |
| CVE-2026-85483 | 2 Oct 2026 | CVSS 6.3 | Apache Software Foundation Apache ThriftUse of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-85493 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-94634 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python… | |
| CVE-2026-94635 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua… | |
| CVE-2026-94639 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache Thriftimproper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift… | |
| CVE-2026-103552 | 2 Oct 2026 | CVSS 7.3 | Apache Software Foundation Apache Directory LDAP APIStack Overflow vulnerability in Apache Directory LDAP API. Before binding, a client can send a deeply nested search filter that overflows the stack… | |
| CVE-2026-103877 | 2 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache Directory LDAP APIDeserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre-TLS MITM) can answer a client's… | |
| CVE-2026-103878 | 2 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache Directory LDAP APICleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search… | |
| CVE-2026-103880 | 2 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache Directory LDAP APIAsymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30… | |
| CVE-2026-103885 | 2 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache Directory LDAP APIAsymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Apache DS) may consume 100% of a… | |
| CVE-2026-102731 | 2 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache Directory LDAP APIMemory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer (or a MITM) can send a small BER-encoded… | |
| CVE-2026-93546 | 1 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache HTTP ServerInteger overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes… | |
| CVE-2026-73637 | 1 Oct 2026 | CVSS 7.3 | Apache Software Foundation Apache HTTP ServerUse after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote… | |
| CVE-2026-79768 | 1 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache HTTP ServerPath equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard… | |
| CVE-2026-63718 | 1 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache HTTP ServerInconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via… | |
| CVE-2026-73636 | 1 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache HTTP ServerAuthentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a… | |
| CVE-2026-58415 | 1 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache HTTP ServerInternal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms… | |
| CVE-2026-59685 | 1 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache HTTP ServerOut-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue… | |
| CVE-2026-59797 | 1 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache HTTP ServerImproper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache… | |
| CVE-2026-63045 | 1 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache HTTP ServerImproper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms… | |
| CVE-2026-63292 | 1 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache HTTP ServerStack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote… | |
| CVE-2026-63686 | 1 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache HTTP ServerA NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend… | |
| CVE-2026-57941 | 1 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache HTTP ServerUse After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from… | |
| CVE-2026-56153 | 1 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache HTTP ServerOut-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. |
Page 3 of 5