7.3
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.
This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.
This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.
Basic Information
ID
CVE-2026-48913
Source
apache
Published
Jun 8, 2026 at 15:24
Modified
Jun 8, 2026 at 18:14
Affected Product
Vendor
Apache Software Foundation
Product
Apache HTTP Server
Version
2.4.55
Affected Versions
Apache Software Foundation Apache HTTP Server 2.4.55