Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache HTTP Server

139 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-42356

    Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories

    Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension unders…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine