<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities of HTTP Server</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Vulnerabilities published under the CPE names of HTTP Server.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 12 Sep 2026 06:44:40 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-34355</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-34355</link>
      <description>Apache HTTP Server: mod_proxy_html buffer overflow</description>
      <content:encoded>Apache HTTP Server: mod_proxy_html buffer overflow</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-34355</guid>
      <pubDate>Mon, 08 Jun 2026 15:20:30 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-44185</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-44185</link>
      <description>Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`</description>
      <content:encoded>Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-44185</guid>
      <pubDate>Mon, 08 Jun 2026 15:22:11 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-42536</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-42536</link>
      <description>Apache HTTP Server: mod_xml2enc heap overflow</description>
      <content:encoded>Apache HTTP Server: mod_xml2enc heap overflow</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-42536</guid>
      <pubDate>Mon, 08 Jun 2026 15:23:46 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-28780</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-28780</link>
      <description>Apache HTTP Server: buffer overflow in mod_proxy_ajp via  ajp_msg_check_header()</description>
      <content:encoded>Apache HTTP Server: buffer overflow in mod_proxy_ajp via  ajp_msg_check_header()</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-28780</guid>
      <pubDate>Tue, 05 May 2026 21:29:41 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-49975</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-49975</link>
      <description>Apache HTTP Server: mod_http2 denial of service</description>
      <content:encoded>Apache HTTP Server: mod_http2 denial of service</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-49975</guid>
      <pubDate>Mon, 08 Jun 2026 15:26:04 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2021-40438</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2021-40438</link>
      <description>mod_proxy SSRF</description>
      <content:encoded>mod_proxy SSRF</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2021-40438</guid>
      <pubDate>Thu, 16 Sep 2021 14:40:23 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-23918</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-23918</link>
      <description>Apache HTTP Server: http2: double free and possible RCE on early reset</description>
      <content:encoded>Apache HTTP Server: http2: double free and possible RCE on early reset</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-23918</guid>
      <pubDate>Mon, 04 May 2026 14:44:28 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-3891</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-3891</link>
      <description>Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled</description>
      <content:encoded>Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-3891</guid>
      <pubDate>Tue, 29 Apr 2025 11:56:50 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-29167</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-29167</link>
      <description>Apache HTTP Server: mod_ldap per-dir use-after-free</description>
      <content:encoded>Apache HTTP Server: mod_ldap per-dir use-after-free</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-29167</guid>
      <pubDate>Mon, 08 Jun 2026 15:07:59 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-44186</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-44186</link>
      <description>Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp</description>
      <content:encoded>Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-44186</guid>
      <pubDate>Mon, 08 Jun 2026 15:11:12 +0000</pubDate>
    </item>
  </channel>
</rss>
