<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/product/85cf3fa1-0948-49de-9435-e1d7feb96f7f/recent</id>
  <title>Most recent vulnerabilities of HTTP Server</title>
  <updated>2026-09-12T06:44:42.263327+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Vulnerabilities published under the CPE names of HTTP Server.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-34355</id>
    <title>CVE-2026-34355</title>
    <updated>2026-09-11T12:09:02.429000+00:00</updated>
    <content>Apache HTTP Server: mod_proxy_html buffer overflow</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-34355"/>
    <summary>Apache HTTP Server: mod_proxy_html buffer overflow</summary>
    <published>2026-06-08T15:20:30.900000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-44185</id>
    <title>CVE-2026-44185</title>
    <updated>2026-09-11T12:09:02.318000+00:00</updated>
    <content>Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-44185"/>
    <summary>Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`</summary>
    <published>2026-06-08T15:22:11.809000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-42536</id>
    <title>CVE-2026-42536</title>
    <updated>2026-09-10T12:05:09.471000+00:00</updated>
    <content>Apache HTTP Server: mod_xml2enc heap overflow</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-42536"/>
    <summary>Apache HTTP Server: mod_xml2enc heap overflow</summary>
    <published>2026-06-08T15:23:46.290000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-28780</id>
    <title>CVE-2026-28780</title>
    <updated>2026-09-10T12:04:53.806000+00:00</updated>
    <content>Apache HTTP Server: buffer overflow in mod_proxy_ajp via  ajp_msg_check_header()</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-28780"/>
    <summary>Apache HTTP Server: buffer overflow in mod_proxy_ajp via  ajp_msg_check_header()</summary>
    <published>2026-05-05T21:29:41.527000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-49975</id>
    <title>CVE-2026-49975</title>
    <updated>2026-08-19T12:05:08.039000+00:00</updated>
    <content>Apache HTTP Server: mod_http2 denial of service</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-49975"/>
    <summary>Apache HTTP Server: mod_http2 denial of service</summary>
    <published>2026-06-08T15:26:04.674000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2021-40438</id>
    <title>CVE-2021-40438</title>
    <updated>2026-08-06T03:55:20.326000+00:00</updated>
    <content>mod_proxy SSRF</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2021-40438"/>
    <summary>mod_proxy SSRF</summary>
    <published>2021-09-16T14:40:23+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-23918</id>
    <title>CVE-2026-23918</title>
    <updated>2026-07-15T01:17:47.323000+00:00</updated>
    <content>Apache HTTP Server: http2: double free and possible RCE on early reset</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-23918"/>
    <summary>Apache HTTP Server: http2: double free and possible RCE on early reset</summary>
    <published>2026-05-04T14:44:28.513000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2025-3891</id>
    <title>CVE-2025-3891</title>
    <updated>2026-06-29T20:42:40.007000+00:00</updated>
    <content>Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2025-3891"/>
    <summary>Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled</summary>
    <published>2025-04-29T11:56:50.808000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-29167</id>
    <title>CVE-2026-29167</title>
    <updated>2026-06-09T12:31:24.706000+00:00</updated>
    <content>Apache HTTP Server: mod_ldap per-dir use-after-free</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-29167"/>
    <summary>Apache HTTP Server: mod_ldap per-dir use-after-free</summary>
    <published>2026-06-08T15:07:59.231000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-44186</id>
    <title>CVE-2026-44186</title>
    <updated>2026-06-09T12:20:10.986000+00:00</updated>
    <content>Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-44186"/>
    <summary>Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp</summary>
    <published>2026-06-08T15:11:12.743000+00:00</published>
  </entry>
</feed>
