Security Advisory

Apache Product Security Update Advisory (CVE-2026-23918)

A security update has been released to address a vulnerability in an Apache product.
the affected product is Apache HTTP Server, and the Affected Versions are 2.4.66.
the vulnerability is identified as the Double Free vulnerability (CVE-2026-23918).
the Vulnerability Patch was made available in the latest update.
Apache HTTP Server users should follow the instructions on the reference site to update to the latest version of the Vulnerability Patch, 2.4.67.
the reference site is the Apache HTTP Server 2.4 vulnerabilities page.