Apache HTTP Server vulnerabilities
Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-46729) It was discovered that Apache HTTP Server did not correctly handle certain session cookies. A remote attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 2
Read at Ubuntu Security Notices
- Vendor
- Canonical, Apache Software Foundation
- Product
- Ubuntu, Apache HTTP Server
- EPSS
- 0.004 (p37)
- Exposure class
- Operating system, Web platform
Why it ranks 46 (High)
- Product class: operating system, web platform
- Widely deployed vendor product (Canonical)
- Covered by 3 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-46729 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-47360 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-48005 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-56153 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-56449 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.