AP
Product
Apache Portable Runtime Utility
by Apache Software Foundation · last CVE Aug 6, 2026
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch

Add Apache Portable Runtime Utility to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-49506
7.5
0%
Aug 6
Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
Affected: 1.2.0 through 1.6.3
CVE-2026-34501
7.5
1%
Aug 6
Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
Affected: 1.6.0 through 1.6.3
CVE-2026-34502
7.5
1%
Aug 6
Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Affected: 1.3.0 through 1.6.3
Showing 3