CVE-2026-63045

Vendor

Apache Software Foundation

Product

Apache HTTP Server

CVSS

7.5

EPSS

0.004 (p37)

Exposure class

Operating system, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 46
   Ubuntu notice Ubuntu 7h ago

   Apache HTTP Server vulnerabilities

   Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

   CVE-2026-46729CVE-2026-47360CVE-2026-48005+14 more Canonical Apache Software Foundation
2. 26
   CVE NVD 1 Oct 2026

   Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms…

   Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy…

   CVSS 7.5 Fix available CVE-2026-63045 Apache Software Foundation