CVE-2026-63686

Vendor

Apache Software Foundation

Product

Apache HTTP Server

EPSS

0.004 (p37)

Exposure class

Operating system, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 46
   Ubuntu notice Ubuntu 7h ago

   Apache HTTP Server vulnerabilities

   Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

   CVE-2026-46729CVE-2026-47360CVE-2026-48005+14 more Canonical Apache Software Foundation
2. 16
   CVE NVD 1 Oct 2026

   A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend…

   A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose…

   Fix available CVE-2026-63686 Apache Software Foundation