CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products

Apache HTTP Server — security advisories

vendor: Apache16 advisories2 exploited4 sourceslatest 2026-07-09⚡ RSS feed

Every advisory CSIRTS.com has correlated to Apache HTTP Server, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch Apache HTTP Server

Get an email when a new Apache HTTP Server advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities

highCVE-2023-38709 CVE-2024-42516 CVE-2024-43204 CVE-2024-43394cert-bund2026-07-09

USN-8516-1: Apache HTTP Server vulnerabilities

unknownCVE-2026-29167 CVE-2026-29170 CVE-2026-34355 CVE-2026-34356ubuntu2026-07-08

[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities

highexploitedCVE-2024-38475 CVE-2023-38709 CVE-2024-36387 CVE-2024-38472cert-bund2026-07-02

CVE-2026-29170: Apache HTTP Server: mod_proxy_ftp XSS

mediumCVSS 6.1CVE-2026-29170msrc2026-06-09

CVE-2026-42535: Apache HTTP Server: mod_dav_fs protected directory access

highCVSS 7.5CVE-2026-42535msrc2026-06-09

CVE-2026-48913: Apache HTTP Server: mod_http2 memory corruption when file handles exhausted

highCVSS 7.3CVE-2026-48913msrc2026-06-09

CVE-2026-34356: Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

highCVSS 7.5CVE-2026-34356msrc2026-06-09

CVE-2026-29167: Apache HTTP Server: mod_ldap per-dir use-after-free

highCVSS 8.6CVE-2026-29167msrc2026-06-09

CVE-2026-44186: Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp

mediumCVSS 6.5CVE-2026-44186msrc2026-06-09

CVE-2026-44185: Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

highCVSS 7.3CVE-2026-44185msrc2026-06-09

CVE-2026-43951: Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash

mediumCVSS 6.5CVE-2026-43951msrc2026-06-09

CVE-2026-34355: Apache HTTP Server: mod_proxy_html buffer overflow

highCVSS 7.5CVE-2026-34355msrc2026-06-09

CVE-2026-44631: Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow

criticalCVSS 9.4CVE-2026-44631msrc2026-06-09

CVE-2026-42536: Apache HTTP Server: mod_xml2enc heap overflow

highCVSS 7.5CVE-2026-42536msrc2026-06-09

CVE-2026-49975: Apache HTTP Server: mod_http2 denial of service

highCVSS 7.5CVE-2026-49975msrc2026-06-09

CVE-2024-38475: Apache HTTP Server Improper Escaping of Output Vulnerability

criticalexploitedCVE-2024-38475cisa-kev2025-05-01