CVE-2026-43951 Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash Information published. EPSS 0.01 CVE-2026-43951 Apache US Microsoft Security · 11. 6. 10:02