Apache vulnerabilities
3,063 CVEs and advisories name Apache as an affected vendor, 33 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-73636Apache HTTP Server: mod_auth_digest one-time-nonce replay attack
- CVE-2026-63718Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling
- CVE-2026-63292Apache HTTP Server: mod_vhost_alias stack overflow
- CVE-2026-63045Apache HTTP Server: mod_proxy_ftp PASV address handling
- CVE-2026-59797Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
- CVE-2026-59685Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
- CVE-2026-58415Apache HTTP Server: mod_dav_fs property database read access
- CVE-2026-57941Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy
- CVE-2026-56449Apache HTTP Server: mod_proxy_html: crash in dump_content
- CVE-2026-56154Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}
- CVE-2026-56153Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
- CVE-2026-48005Apache HTTP Server: mod_auth_digest reauthentication attack
- CVE-2026-47360Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
- CVE-2026-46729Apache HTTP Server: mod_heartmonitor denial of service
- CVE-2026-42356Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
- CVE-2026-42528Apache HTTP Server: mod_dav shared lock overflow
- CVE-2026-94276Apache APISIX: Openid-connect introspection validation issue
- CVE-2026-94269Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatch
- CVE-2026-94250Apache APISIX: Batch response aggregation can exhaust worker memory
- CVE-2026-94220Apache APISIX: session fixation issue in feishu-auth and dingtalk-auth plugin
- CVE-2026-94212Apache APISIX: unauthenticated impersonation issue in saml-auth
- CVE-2026-82806Apache APISIX: cross-request permission pollution via static permission list mutation
- CVE-2026-78242Apache APISIX: data-mask may fail to redact request headers in logger output
- CVE-2026-88789Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening
- CVE-2026-95616Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions
- CVE-2026-92899Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce
- CVE-2026-92121Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference
- CVE-2026-89238Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection
- CVE-2026-88920Apache WSS4J: SAML Sender-Vouches Authentication Bypass
- CVE-2026-87830Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.