CVE-2026-73637

Vendor

Apache Software Foundation

Product

Apache HTTP Server

EPSS

0.004 (p37)

Exposure class

Operating system, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 46
   Ubuntu notice Ubuntu 6h ago

   Apache HTTP Server vulnerabilities

   Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

   CVE-2026-46729CVE-2026-47360CVE-2026-48005+14 more Canonical Apache Software Foundation
2. 16
   CVE NVD 1 Oct 2026

   Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote…

   Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest…

   Fix available CVE-2026-73637 Apache Software Foundation