Veille CVE

Jeudi 1 octobre 2026

3 CVE sur 20

  1. CVE-2026-59797 9.8 Critique

    Apache Software Foundation Apache HTTP Server · Apache http server

    Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

  2. CVE-2026-57941 9.8 Critique

    Apache Software Foundation Apache HTTP Server · Apache http server

    Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

  3. CVE-2026-56154 9.8 Critique

    Apache Software Foundation Apache HTTP Server · Apache http server

    Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.