Skip to content

CVE record · 2 sources

CVE-2026-47360

CVSS 7.5

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.

Vendor: Apache Software Foundation
Product: Apache HTTP Server
CVSS: 7.5
EPSS: 0.004 (p37)
Exposure class: Operating system, Web platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

46

Ubuntu notice Ubuntu 5h ago

Apache HTTP Server vulnerabilities

Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

CVE-2026-46729 CVE-2026-47360 CVE-2026-48005+14 more Canonical Apache Software Foundation
21

CVE NVD 1 Oct 2026

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookieRemove changes across internal redirects, the session cookie may still be passed to a…

CVSS 7.5 CVE-2026-47360 Apache Software Foundation