poslední zpráva
SPOJENO AI EPSS 0.01 (nejvyšší)
Apache HTTP Server 2.4 vulnerabilities fixed by 2.4.71
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-119618, CVE-2026-106023, CVE-2026-109163, Summary: CVE-2026-119618 (critical): mod_http2: heap corruption and RCE in assign_headers ¶ Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2…
Apache IT NL FI FR
CVE v události 4
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-106023 | – | – | < 0.01 |
| CVE-2026-109163 | – | – | < 0.01 |
| CVE-2026-119618 | – | – | < 0.01 |
| CVE-2026-63292 | 7.5 3.1 · CISA-ADP | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 4
-
· CSIRT Itálie (ACN) IT
Rilevate vulnerabilità in Apache HTTP Server
Aggiornamenti di sicurezza sanano 3 vulnerabilità, di cui una con gravità "critica" e una con gravità "alta", in Apache HTTP Server. Tali vulnerabilità, qualora sfruttate, potrebbero permettere a un attaccante remoto di eseguire codice arbitrario o compromettere la disponibilità del servizio sui sistemi interessati.
-
· NCSC-NL NL
NCSC-2026-0484 [1.00] [M/H] Kwetsbaarheid verholpen in Apache HTTP Server
Apache heeft een kwetsbaarheid verholpen in Apache HTTP Server, specifiek in de mod_http2 module (versies 2.4.55 tot 2.4.70) en mod_h2 module (versies 2.0.8 tot 2.0.42). De kwetsbaarheid betreft een concurrency probleem in de assign_headers functie van de mod_http2 en mod_h2 modules. De kwetsbaarheid maakt het mogelijk voor niet-geauthenticeerde externe aanvallers om op afstand willekeurige commando's uit te voeren, wat kan leiden tot remote code execution op servers waar HTTP/2 is ingeschakeld…
-
· zachyceno · NCSC-FI FI nadpis události
Apache HTTP Server 2.4 vulnerabilities fixed by 2.4.71
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-119618, CVE-2026-106023, CVE-2026-109163, Summary: CVE-2026-119618 (critical): mod_http2: heap corruption and RCE in assign_headers ¶ Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2…
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans Apache HTTP Server (09 novembre 2026)
De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.