Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-46729, CVE-2026-47360, CVE-2026-104286, CVE-2026-56154, CVE-2026-57941, CVE-2026-59797, CVE-2026-48005, CVE-2026-56153, CVE-2026-56449, CVE-2026-59685, CVE-2026-63045, CVE-2026-63292, CVE-2026-73636, CVE-2026-73637
By Roy Kalfon |
2 October 2026
Multiple CVEs – Apache HTTP Server multiple module memory-safety and auth logic flaws enable DoS and potential RCE
Apache HTTP Server 2.4.0–2.4.68 has multiple issues in mod_http2 (UAF via shared session->bbtmp re-entrancy), mod_ssl (improper privilege management via SSLRequire file expressions), mod_vhost_alias (stack overflow via Host >8192 bytes with VirtualDocumentRoot hostname specifier + raised LimitRequestFieldSize), plus DoS in mod_auth_digest/mod_heartmonitor and OOB write in mod_proxy_html. Upgrade to 2.4.69 to mitigate.