7.3
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server
This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.
Users are recommended to upgrade to version 2.4.68, which fixes the issue.
This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.
Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Basic Information
ID
CVE-2026-44185
Source
apache
Published
Jun 8, 2026 at 15:22
Modified
Jun 8, 2026 at 18:11
Affected Product
Vendor
Apache Software Foundation
Product
Apache HTTP Server
Version
2.4.0
Affected Versions
Apache Software Foundation Apache HTTP Server 2.4.0