Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On July 8, 2026, multiple vulnerabilities were disclosed in the Apache HTTP Server, affecting various modules including mod_ldap, mod_proxy_ftp, and mod_proxy_html. These vulnerabilities could lead to denial of service attacks or arbitrary code execution. Specifically, CVE-2026-29167 allows attacker...
Oracle has released advisories for multiple denial-of-service (DoS) vulnerabilities affecting mod_http2 in Oracle Linux 10. The vulnerabilities include CVE-2026-43951, CVE-2026-48913, and CVE-2026-49975, all published on 2026-06-08. CVE-2026-49975 specifically allows for remote DoS attacks via compr...
A regression in Apache HTTP Server was introduced by USN-8571-1, which failed to fully address vulnerabilities, leading to potential denial of service when HTTP/2 proxying is enabled. The vulnerabilities include CVE-2026-33007, which allows remote attackers to exploit memory operations, and CVE-2026...
