CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products

HTTP Server — security advisories

vendor: Apache15 advisories4 exploited4 sourceslatest 2026-08-25⚡ RSS feed

Every advisory CSIRTS.com has correlated to HTTP Server, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch HTTP Server

Get an email when a new HTTP Server advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities

highCVE-2026-49975 CVE-2026-29167 CVE-2026-29170 CVE-2026-34355cert-bund2026-08-25

[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities

highCVE-2026-23918 CVE-2026-24072 CVE-2026-28780 CVE-2026-29168cert-bund2026-08-21

[UPDATE] [high] Apache HTTP Server: Multiple Vulnerabilities

highCVE-2025-55753 CVE-2025-58098 CVE-2025-59775 CVE-2025-65082cert-bund2026-08-14

HTTP/2 Bomb CVE-2026-49975

unknownCVE-2026-49975fortinet2026-08-12

CVE-2026-33006: Apache HTTP Server: mod_auth_digest timing attack

mediumCVSS 4.8CVE-2026-33006msrc2026-08-06

CVE-2026-33523: Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line

mediumCVSS 6.5CVE-2026-33523msrc2026-08-06

CVE-2026-33857: Apache HTTP Server: Off-by-one OOB reads in AJP getter functions

mediumCVSS 5.3CVE-2026-33857msrc2026-08-06

CVE-2026-29169: Apache HTTP Server: mod_dav_lock indirect lock crash

highCVSS 7.5CVE-2026-29169msrc2026-08-06

CVE-2026-34059: Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

highCVSS 7.5CVE-2026-34059msrc2026-08-06

CVE-2025-59775: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

highCVSS 7.5CVE-2025-59775msrc2026-08-06

CVE-2026-44119: Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules

mediumCVSS 5.5CVE-2026-44119msrc2026-06-09

CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF)

criticalexploitedCVE-2021-40438cisa-kev2021-12-01

CVE-2019-0211: Apache HTTP Server Privilege Escalation Vulnerability

criticalexploitedCVE-2019-0211cisa-kev2021-11-03

CVE-2021-41773: Apache HTTP Server Path Traversal Vulnerability

criticalexploitedCVE-2021-41773cisa-kev2021-11-03

CVE-2021-42013: Apache HTTP Server Path Traversal Vulnerability

criticalexploitedCVE-2021-42013cisa-kev2021-11-03