Ubuntu Multiple Apache HTTP Server Vulnerabilities Discovered in Ubuntu
Article Content
- •Apache HTTP Server vulnerabilities affect multiple Ubuntu LTS versions.
- •Critical issues include denial of service and information leakage risks.
- •Patches were released on November 10, 2026, for all affected versions.
A series of vulnerabilities affecting the Apache HTTP Server were disclosed, impacting multiple Ubuntu LTS versions. Key issues include improper handling of memory operations, session cookies, and forms of authentication, potentially allowing denial of service attacks and information leaks. The vulnerabilities are tracked under several CVEs, including CVE-2026-46729, CVE-2026-47360, and CVE-2026-56153, with CVSS scores ranging from 5.3 to 9.8. Affected versions include Ubuntu 14.04 LTS through 26.10, with some issues specifically impacting the latest versions. The vulnerabilities were discovered by various researchers, including Zhen Kong and Lucian Nitescu. The updates to address these vulnerabilities were released on November 10, 2026, following their identification in October 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Ubuntu and CVE-2026-4271 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed