Apache vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-103119	TO Tomcat Apache	9.1	1%	Oct 20	Apache Tomcat: AJP response mix-up
CVE-2026-101356	TO Tomcat Apache	9.1	0%	Oct 20	Apache Tomcat: HTTP/2 request/response mix-up after error during async processing
CVE-2026-101296	TO Tomcat Apache	9.1	1%	Oct 20	Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms
CVE-2026-93446	TO Tomcat Apache	–	0%	Oct 20	Apache Tomcat: Possible TLS 1.3 connection failures
CVE-2026-88041	TO Tomcat Apache	–	0%	Oct 20	Apache Tomcat: HTTP/2 trailer header cross-contamination
CVE-2026-80353	TO Tomcat Apache	–	0%	Oct 20	Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector
CVE-2026-74049	TO Tomcat Apache	–	0%	Oct 20	Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)
CVE-2026-74048	TO Tomcat Apache	–	0%	Oct 20	Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up
CVE-2026-108039	CX Cxf Apache	7.5	0%	Oct 9	Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits
CVE-2026-107938	CX Cxf Apache	9.1	0%	Oct 9	Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
CVE-2026-107937	CX Cxf Apache	7.5	1%	Oct 9	Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.
CVE-2026-100227	CX Cxf Apache	7.5	0%	Oct 9	Apache CXF: XML Signature wrapping in JAX-RS XML Security
CVE-2026-97791	CX Cxf Apache	7.5	0%	Oct 9	Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests
CVE-2026-97468	CX Cxf Apache	9.1	0%	Oct 9	Apache CXF: Authentication bypass via weak cache keys for validated STS tokens
CVE-2026-86463	CX Cxf Apache	7.5	0%	Oct 9	Apache CXF: FIQL Query Parser Denial of Service
CVE-2026-79650	CX Cxf Apache	6.1	0%	Oct 9	Apache CXF: OIDC RP Open Redirect
CVE-2026-78384	CX Cxf Apache	7.5	0%	Oct 9	Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)
CVE-2026-73179	CX Cxf Apache	8.1	0%	Oct 9	Apache CXF: JPA authorization-code consume is non-atomic
CVE-2026-71575	CX Cxf Apache	9.1	0%	Oct 9	Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
CVE-2026-92415	JA Jackrabbit Apache	5.3	1%	Oct 7	Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies
CVE-2026-92414	JA Jackrabbit Apache	9.1	1%	Oct 7	Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens
CVE-2026-90466	IM Impala Apache	6.5	1%	Oct 7	Apache Impala: Path traversal executes JARs outside trusted paths
CVE-2026-105244	LO Log4net Apache	5.3	1%	Oct 6	Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
CVE-2026-105243	LO Log4net Apache	5.3	1%	Oct 6	Apache log4net: Oversize EventLogAppender record silently discarded
CVE-2026-105242	LO Log4net Apache	5.3	1%	Oct 6	Apache log4net: Request validation failure drops the event in the aspnet-request converter
CVE-2026-105241	LO Log4net Apache	5.3	1%	Oct 6	Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
CVE-2026-105240	LO Log4net Apache	5.3	1%	Oct 6	Apache log4net: NUL character truncates OutputDebugStringAppender records
CVE-2026-105239	LO Log4net Apache	5.3	1%	Oct 6	Apache log4net: NUL character truncates EventLogAppender records
CVE-2026-104714	ST Struts Apache	8.8	1%	Oct 5	Apache Struts: Shared message formatter exposes date and time values across concurrent requests
CVE-2026-104713	ST Struts Apache	6.5	1%	Oct 5	Apache Struts: Unbounded request body read in the REST plugin
CVE-2026-104712	ST Struts Apache	7.5	1%	Oct 5	Apache Struts: Disproportionate response size when rendering BigDecimal request parameters
CVE-2026-104711	ST Struts Apache	9.8	1%	Oct 5	Apache Struts: OGNL injection in the legacy RESTful action mapper
CVE-2026-63686	HS HTTP Server Apache	7.5	0%	Oct 1	Apache HTTP Server: mod_xml2enc crash on charset conversion failure
CVE-2026-93546	HS HTTP Server Apache	8.8	0%	Oct 1	Apache HTTP Server: mod_dav_fs namespace overflow
CVE-2026-79768	HS HTTP Server Apache	5.3	1%	Oct 1	Apache HTTP Server: mod_userdir information disclosure
CVE-2026-73637	HS HTTP Server Apache	7.3	0%	Oct 1	Apache HTTP Server: mod_auth_digest DoS attack
CVE-2026-73636	HS HTTP Server Apache	8.1	0%	Oct 1	Apache HTTP Server: mod_auth_digest one-time-nonce replay attack
CVE-2026-63718	HS HTTP Server Apache	7.5	0%	Oct 1	Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling
CVE-2026-63292	HS HTTP Server Apache	7.5	1%	Oct 1	Apache HTTP Server: mod_vhost_alias stack overflow
CVE-2026-63045	HS HTTP Server Apache	7.5	0%	Oct 1	Apache HTTP Server: mod_proxy_ftp PASV address handling
CVE-2026-59797	HS HTTP Server Apache	9.8	0%	Oct 1	Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
CVE-2026-59685	HS HTTP Server Apache	7.5	0%	Oct 1	Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
CVE-2026-58415	HS HTTP Server Apache	5.3	0%	Oct 1	Apache HTTP Server: mod_dav_fs property database read access
CVE-2026-57941	HS HTTP Server Apache	9.8	1%	Oct 1	Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy
CVE-2026-56449	HS HTTP Server Apache	7.5	1%	Oct 1	Apache HTTP Server: mod_proxy_html: crash in dump_content
CVE-2026-56154	HS HTTP Server Apache	9.8	1%	Oct 1	Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}
CVE-2026-56153	HS HTTP Server Apache	7.5	0%	Oct 1	Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
CVE-2026-48005	HS HTTP Server Apache	7.5	1%	Oct 1	Apache HTTP Server: mod_auth_digest reauthentication attack
CVE-2026-47360	HS HTTP Server Apache	7.5	0%	Oct 1	Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
CVE-2026-46729	HS HTTP Server Apache	7.5	0%	Oct 1	Apache HTTP Server: mod_heartmonitor denial of service
CVE-2026-42356	HS HTTP Server Apache	3.7	0%	Oct 1	Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
CVE-2026-42528	HS HTTP Server Apache	4.3	0%	Oct 1	Apache HTTP Server: mod_dav shared lock overflow
CVE-2026-95616	WS Wss4j Apache	7.5	0%	Sep 30	Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions
CVE-2026-92899	WS Wss4j Apache	4.8	1%	Sep 30	Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce
CVE-2026-92121	WS Wss4j Apache	7.5	1%	Sep 30	Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference
CVE-2026-89238	WS Wss4j Apache	9.1	0%	Sep 30	Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection
CVE-2026-88920	WS Wss4j Apache	9.8	1%	Sep 30	Apache WSS4J: SAML Sender-Vouches Authentication Bypass
CVE-2026-87830	WS Wss4j Apache	9.1	0%	Sep 30	Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.
CVE-2026-85532	WS Wss4j Apache	7.5	1%	Sep 30	Apache WSS4J: Insufficient Validation of Derived-Key Parameters
CVE-2026-66083	DO Dolphinscheduler Apache	6.5	0%	Sep 29	Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource