Security Advisory

Apache Product Security Update Advisory

  • Nov 13 2026
Apache Product Security Update Advisory

This is a security update advisory for Apache products.

  • The affected product is Apache HTTP Server. – The vulnerabilities resolved are as follows: – CVE-2026-106023: A null pointer dereference vulnerability in Apache HTTP Server.
    • CVE-2026-109163: A stack-based buffer overflow vulnerability in Apache HTTP Server.
    • CVE-2026-119618: An improper synchronization vulnerability in Apache HTTP Server. – The Affected Versions are as follows.
    • CVE-2026-106023: Versions 2.4.30 through 2.4.70.
    • CVE-2026-109163: Versions from 2.4.69 through 2.4.70. – CVE-2026-119618": Versions from 2.4.55 through 2.4.70. - Vulnerability Patches have been released in the latest updates; users should update to Apache HTTP Server 2.4.71` as instructed on the reference site.

The reference site is Apache HTTP Server 2.4 vulnerabilities.

Tags:
Previous Post