CVE-2026-63292

Vendor

Apache Software Foundation

Product

Apache HTTP Server

CVSS

7.5

EPSS

0.004 (p37)

Exposure class

Operating system, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 46
   Ubuntu notice Ubuntu 7h ago

   Apache HTTP Server vulnerabilities

   Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

   CVE-2026-46729CVE-2026-47360CVE-2026-48005+14 more Canonical Apache Software Foundation
2. 26
   CVE NVD 1 Oct 2026

   Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote…

   Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP…

   CVSS 7.5 Fix available CVE-2026-63292 Apache Software Foundation