CVE-2026-43951 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 42%

Affected Products (NVD)

Vendor	Product	Version
apache	http_server	2.4.0 ≤ 𝑥 ≤ 2.4.67

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

apache2

bookworm	2.4.68-1~deb12u1 fixed
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	2.4.67-1~deb11u3 fixed
forky	2.4.68-1 fixed
sid	2.4.68-1 fixed
trixie	2.4.68-1~deb13u1 fixed
trixie (security)	vulnerable

Ubuntu Releases

Ubuntu Product

Codename

apache2

bionic	Fixed 2.4.29-1ubuntu4.27+esm10 released
focal	Fixed 2.4.41-4ubuntu3.23+esm5 released
jammy	Fixed 2.4.52-1ubuntu4.23 released
noble	Fixed 2.4.58-1ubuntu8.15 released
questing	ignored
resolute	Fixed 2.4.66-2ubuntu2.4 released
trusty	Fixed 2.4.7-1ubuntu4.22+esm14 released
xenial	Fixed 2.4.18-2ubuntu3.17+esm19 released

openSUSE / SLES Releases

openSUSE Product

Release

apache2

suse enterprise desktop 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise sap 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise server 12 SP3	2.4.66-29.134.1 fixed
suse enterprise server 12 SP5	2.4.66-35.81.1 fixed
suse enterprise server 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP6	2.4.66-150600.5.55.1 fixed
suse enterprise server 15 SP7	2.4.66-150700.4.23.1 fixed

apache2-devel

suse enterprise sap 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise server 12 SP5	2.4.66-35.81.1 fixed
suse enterprise server 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP6	2.4.66-150600.5.55.1 fixed
suse enterprise server 15 SP7	2.4.66-150700.4.23.1 fixed

apache2-doc

suse enterprise sap 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise server 12 SP3	2.4.66-29.134.1 fixed
suse enterprise server 12 SP5	2.4.66-35.81.1 fixed
suse enterprise server 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP5	2.4.66-150400.6.57.1 fixed

apache2-example-pages

suse enterprise server 12 SP3	2.4.66-29.134.1 fixed
suse enterprise server 12 SP5	2.4.66-35.81.1 fixed

apache2-manual

suse enterprise sap 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise server 15 SP6	2.4.66-150600.5.55.1 fixed
suse enterprise server 15 SP7	2.4.66-150700.4.23.1 fixed

apache2-prefork

suse enterprise desktop 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise sap 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise server 12 SP3	2.4.66-29.134.1 fixed
suse enterprise server 12 SP5	2.4.66-35.81.1 fixed
suse enterprise server 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP6	2.4.66-150600.5.55.1 fixed
suse enterprise server 15 SP7	2.4.66-150700.4.23.1 fixed

apache2-tls13

suse enterprise server 12 SP5

2.4.66-35.81.1

fixed

apache2-tls13-devel

suse enterprise server 12 SP5

2.4.66-35.81.1

fixed

apache2-tls13-doc

suse enterprise server 12 SP5

2.4.66-35.81.1

fixed

apache2-tls13-example-pages

suse enterprise server 12 SP5

2.4.66-35.81.1

fixed

apache2-tls13-prefork

suse enterprise server 12 SP5

2.4.66-35.81.1

fixed

apache2-tls13-utils

suse enterprise server 12 SP5

2.4.66-35.81.1

fixed

apache2-tls13-worker

suse enterprise server 12 SP5

2.4.66-35.81.1

fixed

apache2-utils

suse enterprise sap 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise server 12 SP3	2.4.66-29.134.1 fixed
suse enterprise server 12 SP5	2.4.66-35.81.1 fixed
suse enterprise server 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP6	2.4.66-150600.5.55.1 fixed
suse enterprise server 15 SP7	2.4.66-150700.4.23.1 fixed

apache2-worker

suse enterprise sap 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise sap 15 SP7	2.4.66-150700.4.23.1 fixed
suse enterprise server 12 SP3	2.4.66-29.134.1 fixed
suse enterprise server 12 SP5	2.4.66-35.81.1 fixed
suse enterprise server 15 SP4	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP5	2.4.66-150400.6.57.1 fixed
suse enterprise server 15 SP6	2.4.66-150600.5.55.1 fixed
suse enterprise server 15 SP7	2.4.66-150700.4.23.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

httpd

RHEL 9

0:2.4.62-13.el9_8.5

fixed

httpd-core

RHEL 9

0:2.4.62-13.el9_8.5

fixed

httpd-devel

RHEL 9

0:2.4.62-13.el9_8.5

fixed

httpd-filesystem

RHEL 9

0:2.4.62-13.el9_8.5

fixed

httpd-manual

RHEL 9

0:2.4.62-13.el9_8.5

fixed

httpd-tools

RHEL 9

0:2.4.62-13.el9_8.5

fixed

mod

RHEL 9

1:2.4.62-13.el9_8.5

fixed

Amazon Linux Releases

Amazon Package

Release

httpd

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

httpd-core

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

httpd-core-debuginfo

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

httpd-debuginfo

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

httpd-debugsource

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

httpd-devel

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

httpd-filesystem

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

httpd-manual

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

httpd-tools

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

httpd-tools-debuginfo

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

mod_ldap

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

mod_ldap-debuginfo

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

mod_lua

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

mod_lua-debuginfo

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

mod_md

Amazon Linux 2

0:2.4.68-1.amzn2.0.1

fixed

mod_proxy_html

Amazon Linux 2	1:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	1:2.4.68-1.amzn2023.0.1 fixed

mod_proxy_html-debuginfo

Amazon Linux 2023

1:2.4.68-1.amzn2023.0.1

fixed

mod_session

Amazon Linux 2	0:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	0:2.4.68-1.amzn2023.0.1 fixed

mod_session-debuginfo

Amazon Linux 2023

0:2.4.68-1.amzn2023.0.1

fixed

mod_ssl

Amazon Linux 2	1:2.4.68-1.amzn2.0.1 fixed
Amazon Linux 2023	1:2.4.68-1.amzn2023.0.1 fixed

mod_ssl-debuginfo

Amazon Linux 2023

1:2.4.68-1.amzn2023.0.1

fixed

Azure Linux Releases

Azure Package

Release

httpd

Azure Linux 3.0

0:2.4.68-1.azl3

fixed

Common Weakness Enumeration

CWE-125 - Out-of-bounds Read
The software reads data past the end, or before the beginning, of the intended buffer.

Vulnerability Media Exposure

[GERMAN] Apache HTTP Server: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu verändern und offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht näher definierte Angriffe durchzuführen.
Published: 2026-06-08T22:00:00+00:00

References

https://httpd.apache.org/security/vulnerabilities_24.html

http://www.openwall.com/lists/oss-security/2026/06/08/10