VulnerabilityBSI CERT-Bund
Apache HTTP Server: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Programmcode auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-45173 linked CVEs
Open advisory with all CVEs
More on Apache
Other advisories
- Not ratedosv:CLSA-2026-1794631117TuxCare security update for org.apache.cxf (5 CVEs)
- Not ratedosv:CLSA-2026-1794628763TuxCare security update for org.apache.activemq (1 CVE)
- Not ratedosv:CLSA-2026-1794618178TuxCare security update for org.apache.zookeeper:zookeeper (1 CVE)
- Not ratedosv:CLEANSTART-2026-BK50612Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
- Not ratedosv:CLSA-2026-1794597893TuxCare security update for org.apache.avro (3 CVEs)
- HighCVE-2026-124679Apache APISIX: Umgehung der Authentifizierung durch Spoofing
- HighCVE-2026-124679Apache APISIX: Umgehung der Authentifizierung durch Spoofing
- HighCVE-2026-124679Authentication bypass by spoofing vulnerability in Apache APISIX.
Other news entries
- Apache Axis2: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- Apache HTTP Server patches critical HTTP/2 remote code execution flawNewsBleepingComputer
- Apache Patches Critical HTTP Server RCE Found by Anthropic, GoogleNewsSecurityWeek
- Kritische Sicherheitslücke in Apache2 ermöglicht CodeeinschleusungNewsheise Security
- Red Hat: Kritische Sicherheitslücke in Apache HTTP Server entdecktNewsGolem.de — Security
- Apache Axis2: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- Apache HTTP Server: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0484 [1.00] [M/H] Kwetsbaarheid verholpen in Apache HTTP ServerNewsNCSC-NL
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4517
ID