CVE record · 2 sources
CVE-2026-48005
Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an…
- Vendor
- Apache Software Foundation
- Product
- Apache HTTP Server
- EPSS
- 0.004 (p37)
- Exposure class
- Operating system, Web platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Apache HTTP Server vulnerabilities
Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…
-
Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an…
Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (forced re-authentication) via…