HS
Web Server
HTTP Server
by Apache · last CVE Oct 1, 2026
On CISA KEVExploited in the wildRansomware-linked
351
CVEs
5
On KEV
9.8
Max CVSS
20
New 30D
Severity mix
Critical 33High 93Medium 43Low 1
Watch

Add HTTP Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42356
3.7
0%
Oct 1
Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
Affected: 2.4.60 through 2.4.68
Showing 1