Known Vulnerabilities for Apache by Debian
Listed below are 1 of the newest known vulnerabilities associated with "Apache" by "Debian".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126627 json | Creation of Temporary File With Insecure Permissions vulnerability in Apache XML Graphics FOP. This issue affects Apache X... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-124077 json | The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names. Because Git uses a NUL byte to... | Not Provided | 2026-11-09 | 2026-11-12 |
| CVE-2026-124023 json | Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML input the Gutht... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-123779 json | Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java. The exposeServiceMetadata service parameter was enforc... | Not Provided | 2026-11-09 | 2026-11-12 |
| CVE-2026-123770 json | Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The multipart/form-data and applicat... | Not Provided | 2026-11-09 | 2026-11-12 |
| CVE-2026-123766 json | Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apa... | Not Provided | 2026-11-09 | 2026-11-12 |
| CVE-2026-123765 json | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. xssAP... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-123753 json | Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. An unauthenticated caller could supply a non-anonymous... | Not Provided | 2026-11-09 | 2026-11-12 |
| CVE-2026-123374 json | Deserialization of Untrusted Data vulnerability in Apache Roller. When Roller sends a weblog update ping, its XML-RPC client ... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-122300 json | Missing Authorization vulnerability in Apache Roller 4.0 through 6.1.6 allows a weblog member with the Limited role to remove... | Not Provided | 2026-11-11 | 2026-11-11 |