Known Vulnerabilities for Apache Software Foundation by Vendor
Listed below are 10 of the newest known vulnerabilities associated with "Apache Software Foundation" by "Vendor".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73637 json | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an u... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-73636 json | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all plat... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-66755 json | Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alp... | Not Provided | 2026-07-30 | 2026-09-01 |
| CVE-2026-66713 json | Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component in Apache Software Foundation Apache... | Not Provided | 2026-07-28 | 2026-07-29 |
| CVE-2026-63686 json | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms all... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-63292 json | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platfor... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-63045 json | Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.6... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-58415 json | Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-48005 json | Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platfo... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2022-44729 json | Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects A... | Not Provided | 2023-08-22 | 2026-10-08 |