Package · Debian

apache2

267 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.8

CVE-2026-33006 Public exploit

Apache HTTP Server: mod_auth_digest timing attack

A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

May 4, 2026
Medium 5.3

CVE-2024-40725 Public exploit

Apache HTTP Server: source code disclosure with handlers configured via AddType

A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result …

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Jul 18, 2024