Skip to content

CVE record · 2 sources

CVE-2026-73636

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a…

Vendor: Apache Software Foundation
Product: Apache HTTP Server
EPSS: 0.004 (p37)
Exposure class: Operating system, Web platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

46

Ubuntu notice Ubuntu 7h ago

Apache HTTP Server vulnerabilities

Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

CVE-2026-46729 CVE-2026-47360 CVE-2026-48005+14 more Canonical Apache Software Foundation
16

CVE NVD 1 Oct 2026

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a…

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials…

Fix available CVE-2026-73636 Apache Software Foundation