Known Vulnerabilities for Apache-based Web Server by Hp
Listed below are 3 of the newest known vulnerabilities associated with "Apache-based Web Server" by "Hp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Hp Apache-based Web Server
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-107938 json | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname i... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-105299 json | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_req... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-92142 json | Apache Karaf exposes a JMX MBeanServer guarded by KarafMBeanServerGuard, which enforces role-based access control (RBAC) on ... | Not Provided | 2026-09-29 | 2026-10-01 |
| CVE-2026-84748 json | Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-63292 json | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platfor... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-58162 json | The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled client SNI. This issue affe... | Not Provided | 2026-07-29 | 2026-10-01 |
| CVE-2026-58156 json | Apache Traffic Server mis-parses ports in URLs and userinfo, allowing port-based access-control bypass. This issue affects... | Not Provided | 2026-07-29 | 2026-10-01 |
| CVE-2026-58064 json | The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buff... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-42536 json | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This... | Not Provided | 2026-06-08 | 2026-09-14 |
| CVE-2026-28780 json | Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP... | Not Provided | 2026-05-05 | 2026-09-14 |