{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-23918", "tracking": { "current_release_date": "2026-09-08T16:31:09.052993Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-23918", "initial_release_date": "2026-05-04T15:29:47.537964Z", "revision_history": [ { "date": "2026-05-04T15:29:47.537964Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| References created (1).| CWES updated (1)." }, { "date": "2026-05-04T15:29:49.618422Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-05-04T15:35:39.861460Z", "number": "3", "summary": "NCSC Score updated." }, { "date": "2026-05-04T16:01:50.600993Z", "number": "4", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products created (1).| References created (1).| CWES updated (1)." }, { "date": "2026-05-04T16:01:52.824486Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-05-04T16:25:17.097464Z", "number": "6", "summary": "CVSS created." }, { "date": "2026-05-04T16:25:19.222462Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-05-04T17:10:19.451486Z", "number": "8", "summary": "CVSS created.| Unknown change." }, { "date": "2026-05-04T17:10:21.722677Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-05-04T18:25:33.135780Z", "number": "10", "summary": "References created (1)." }, { "date": "2026-05-04T19:12:09.536943Z", "number": "11", "summary": "References created (1)." }, { "date": "2026-05-04T21:24:59.159340Z", "number": "12", "summary": "Products created (1).| Product Identifiers created (1)." }, { "date": "2026-05-04T21:25:04.789761Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-05-05T10:05:47.798447Z", "number": "14", "summary": "Source connected.| CVE status created. (valid)| Products connected (1).| References created (14)." }, { "date": "2026-05-05T10:05:54.368129Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-05-05T11:30:42.977725Z", "number": "16", "summary": "Source connected.| CVE status created. (valid)| News created (1)." }, { "date": "2026-05-05T11:30:57.012421Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-05-05T12:04:01.441194Z", "number": "18", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (358).| Product Identifiers created (355).| References created (1)." }, { "date": "2026-05-05T12:04:31.995060Z", "number": "19", "summary": "NCSC Score updated." }, { "date": "2026-05-05T12:05:43.964631Z", "number": "20", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (3)." }, { "date": "2026-05-05T12:43:52.701020Z", "number": "21", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (2)." }, { "date": "2026-05-05T12:43:57.079481Z", "number": "22", "summary": "NCSC Score updated." }, { "date": "2026-05-05T16:11:54.783947Z", "number": "23", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-05-05T16:12:04.094291Z", "number": "24", "summary": "NCSC Score updated." }, { "date": "2026-05-06T00:27:47.977590Z", "number": "25", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (12).| Product Identifiers created (7).| Product Remediations created (17).| Products created (5).| References created (3).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-05-06T00:27:53.825586Z", "number": "26", "summary": "NCSC Score updated." }, { "date": "2026-05-06T02:41:51.592518Z", "number": "27", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-05-06T11:34:54.041848Z", "number": "28", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-05-06T18:42:55.321298Z", "number": "29", "summary": "Products created (1).| Product Identifiers created (1).| Products connected (1).| Products removed (2)." }, { "date": "2026-05-06T18:42:57.729890Z", "number": "30", "summary": "NCSC Score updated." }, { "date": "2026-05-07T09:10:56.674292Z", "number": "31", "summary": "Products connected (2).| References created (2)." }, { "date": "2026-05-07T09:10:58.858721Z", "number": "32", "summary": "NCSC Score updated." }, { "date": "2026-05-07T12:22:38.509752Z", "number": "33", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| CWES updated (1)." }, { "date": "2026-05-07T12:22:42.753659Z", "number": "34", "summary": "NCSC Score updated." }, { "date": "2026-05-07T18:50:07.086058Z", "number": "35", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| Product Identifiers created (5).| Product Remediations created (6).| Products created (2).| Product Identifiers removed (2).| References created (9).| CWES updated (1)." }, { "date": "2026-05-07T20:15:23.305204Z", "number": "36", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (55).| References created (12)." }, { "date": "2026-05-07T20:15:29.312782Z", "number": "37", "summary": "NCSC Score updated." }, { "date": "2026-05-08T00:27:25.454230Z", "number": "38", "summary": "Products connected (2)." }, { "date": "2026-05-08T00:27:27.802599Z", "number": "39", "summary": "NCSC Score updated." }, { "date": "2026-05-08T12:27:11.915269Z", "number": "40", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| Product Threats created (1).| Product Remediations created (1).| References created (1).| Vendor_assessment created." }, { "date": "2026-05-08T12:27:20.595889Z", "number": "41", "summary": "NCSC Score updated." }, { "date": "2026-05-09T12:05:06.352750Z", "number": "42", "summary": "Products connected (116).| Product Identifiers created (115)." }, { "date": "2026-05-09T18:28:08.351389Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-05-11T09:10:45.618088Z", "number": "44", "summary": "Products connected (1).| References created (2)." }, { "date": "2026-05-12T10:41:23.474284Z", "number": "45", "summary": "Products connected (4).| References created (3)." }, { "date": "2026-05-12T10:41:35.025464Z", "number": "46", "summary": "NCSC Score updated." }, { "date": "2026-05-13T10:11:03.772329Z", "number": "47", "summary": "References created (1)." }, { "date": "2026-05-13T10:11:08.956359Z", "number": "48", "summary": "NCSC Score updated." }, { "date": "2026-05-14T09:16:13.400759Z", "number": "49", "summary": "NCSC Score updated." }, { "date": "2026-05-15T09:27:00.213599Z", "number": "50", "summary": "Products connected (2).| References created (3)." }, { "date": "2026-05-16T12:20:17.557388Z", "number": "51", "summary": "Product Remediations created (1)." }, { "date": "2026-05-16T12:20:19.448630Z", "number": "52", "summary": "NCSC Score updated." }, { "date": "2026-05-18T00:09:10.378002Z", "number": "53", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (5).| Product Identifiers created (4).| References created (3)." }, { "date": "2026-05-18T00:09:15.772001Z", "number": "54", "summary": "NCSC Score updated." }, { "date": "2026-05-18T10:09:39.413952Z", "number": "55", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-05-18T10:09:42.098160Z", "number": "56", "summary": "NCSC Score updated." }, { "date": "2026-05-22T08:32:35.514700Z", "number": "57", "summary": "Products connected (3).| References created (1)." }, { "date": "2026-05-22T08:32:38.512816Z", "number": "58", "summary": "NCSC Score updated." }, { "date": "2026-05-26T16:10:53.637392Z", "number": "59", "summary": "NCSC Score updated." }, { "date": "2026-05-27T09:06:00.797583Z", "number": "60", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-05-27T09:06:05.410202Z", "number": "61", "summary": "NCSC Score updated." }, { "date": "2026-05-27T16:19:19.342307Z", "number": "62", "summary": "EPSS updated." }, { "date": "2026-05-27T16:19:22.420818Z", "number": "63", "summary": "NCSC Score updated." }, { "date": "2026-05-28T08:31:20.638324Z", "number": "64", "summary": "References created (2)." }, { "date": "2026-05-28T08:31:34.314540Z", "number": "65", "summary": "NCSC Score updated." }, { "date": "2026-05-29T08:17:13.531557Z", "number": "66", "summary": "Products connected (1).| References created (2)." }, { "date": "2026-05-29T08:17:16.699409Z", "number": "67", "summary": "NCSC Score updated." }, { "date": "2026-06-01T08:20:18.588375Z", "number": "68", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-06-01T08:20:21.185453Z", "number": "69", "summary": "NCSC Score updated." }, { "date": "2026-06-02T08:34:09.565936Z", "number": "70", "summary": "References created (2)." }, { "date": "2026-06-02T12:25:53.197229Z", "number": "71", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (1).| Product Remediations created (1).| References created (2)." }, { "date": "2026-06-02T12:25:56.715491Z", "number": "72", "summary": "NCSC Score updated." }, { "date": "2026-06-03T08:01:04.390836Z", "number": "73", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-06-03T08:01:10.914909Z", "number": "74", "summary": "NCSC Score updated." }, { "date": "2026-06-03T18:52:08.359444Z", "number": "75", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (1).| Product Remediations created (1).| References created (2)." }, { "date": "2026-06-03T18:52:12.372708Z", "number": "76", "summary": "NCSC Score updated." }, { "date": "2026-06-05T09:22:54.088019Z", "number": "77", "summary": "References created (1)." }, { "date": "2026-06-05T09:22:56.784852Z", "number": "78", "summary": "NCSC Score updated." }, { "date": "2026-06-05T17:32:47.025771Z", "number": "79", "summary": "EPSS updated." }, { "date": "2026-06-05T17:32:53.747964Z", "number": "80", "summary": "NCSC Score updated." }, { "date": "2026-06-06T05:31:45.038973Z", "number": "81", "summary": "NCSC Score updated." }, { "date": "2026-06-09T09:10:39.615505Z", "number": "82", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-06-09T09:10:42.497711Z", "number": "83", "summary": "NCSC Score updated." }, { "date": "2026-06-10T00:06:49.380759Z", "number": "84", "summary": "Products connected (1).| Products removed (470)." }, { "date": "2026-06-10T00:06:56.061307Z", "number": "85", "summary": "NCSC Score updated." }, { "date": "2026-06-10T08:31:30.847027Z", "number": "86", "summary": "Products connected (2).| References created (1)." }, { "date": "2026-06-10T08:31:36.269133Z", "number": "87", "summary": "NCSC Score updated." }, { "date": "2026-06-12T08:16:45.894479Z", "number": "88", "summary": "References created (1)." }, { "date": "2026-06-12T08:16:57.623006Z", "number": "89", "summary": "NCSC Score updated." }, { "date": "2026-06-13T00:20:57.912077Z", "number": "90", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-06-13T00:21:00.108872Z", "number": "91", "summary": "NCSC Score updated." }, { "date": "2026-06-15T15:34:36.465477Z", "number": "92", "summary": "EPSS updated." }, { "date": "2026-06-15T15:34:38.800661Z", "number": "93", "summary": "NCSC Score updated." }, { "date": "2026-06-17T14:12:29.967986Z", "number": "94", "summary": "EPSS updated." }, { "date": "2026-06-17T14:12:35.870393Z", "number": "95", "summary": "NCSC Score updated." }, { "date": "2026-06-18T09:05:58.056499Z", "number": "96", "summary": "References created (1)." }, { "date": "2026-06-18T09:06:04.271078Z", "number": "97", "summary": "NCSC Score updated." }, { "date": "2026-06-23T08:11:32.398536Z", "number": "98", "summary": "Products connected (2).| References created (2)." }, { "date": "2026-06-23T08:11:42.436625Z", "number": "99", "summary": "NCSC Score updated." }, { "date": "2026-06-23T23:41:21.385385Z", "number": "100", "summary": "EPSS updated." }, { "date": "2026-06-23T23:41:32.341148Z", "number": "101", "summary": "NCSC Score updated." }, { "date": "2026-06-24T09:27:51.211222Z", "number": "102", "summary": "References created (2)." }, { "date": "2026-06-24T09:27:56.791275Z", "number": "103", "summary": "NCSC Score updated." }, { "date": "2026-06-24T12:52:27.072793Z", "number": "104", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (14).| References created (23)." }, { "date": "2026-06-24T12:52:40.355426Z", "number": "105", "summary": "NCSC Score updated." }, { "date": "2026-06-24T12:52:43.155265Z", "number": "106", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (14).| References created (23)." }, { "date": "2026-06-25T10:18:34.124291Z", "number": "107", "summary": "References created (1)." }, { "date": "2026-06-25T10:18:42.041844Z", "number": "108", "summary": "NCSC Score updated." }, { "date": "2026-06-29T11:23:31.688835Z", "number": "109", "summary": "References created (2)." }, { "date": "2026-06-29T11:23:34.927735Z", "number": "110", "summary": "NCSC Score updated." }, { "date": "2026-06-30T03:56:52.655116Z", "number": "111", "summary": "References created (4).| CWES updated (1)." }, { "date": "2026-06-30T03:56:57.548947Z", "number": "112", "summary": "NCSC Score updated." }, { "date": "2026-06-30T03:59:05.290258Z", "number": "113", "summary": "References created (4).| CWES updated (1)." }, { "date": "2026-06-30T10:12:33.685323Z", "number": "114", "summary": "References created (1)." }, { "date": "2026-06-30T18:29:23.172136Z", "number": "115", "summary": "EPSS updated." }, { "date": "2026-06-30T18:29:34.965324Z", "number": "116", "summary": "NCSC Score updated." }, { "date": "2026-07-01T09:23:29.456871Z", "number": "117", "summary": "References created (2)." }, { "date": "2026-07-01T09:23:42.788363Z", "number": "118", "summary": "NCSC Score updated." }, { "date": "2026-07-01T13:04:06.270103Z", "number": "119", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (8).| References created (95)." }, { "date": "2026-07-06T08:34:43.835167Z", "number": "120", "summary": "References created (2)." }, { "date": "2026-07-06T08:34:56.003620Z", "number": "121", "summary": "NCSC Score updated." }, { "date": "2026-07-06T12:07:28.176090Z", "number": "122", "summary": "References created (4)." }, { "date": "2026-07-08T08:24:49.291526Z", "number": "123", "summary": "References created (2)." }, { "date": "2026-07-08T08:25:01.670940Z", "number": "124", "summary": "NCSC Score updated." }, { "date": "2026-07-09T09:44:46.538039Z", "number": "125", "summary": "References created (2)." }, { "date": "2026-07-09T09:44:58.473617Z", "number": "126", "summary": "NCSC Score updated." }, { "date": "2026-07-09T15:17:21.501220Z", "number": "127", "summary": "EPSS updated." }, { "date": "2026-07-09T15:17:24.663818Z", "number": "128", "summary": "NCSC Score updated." }, { "date": "2026-07-11T01:56:26.199747Z", "number": "129", "summary": "EPSS updated." }, { "date": "2026-07-11T01:56:35.225892Z", "number": "130", "summary": "NCSC Score updated." }, { "date": "2026-07-12T05:08:24.335002Z", "number": "131", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (8).| CWES updated (1)." }, { "date": "2026-07-12T05:08:35.125189Z", "number": "132", "summary": "NCSC Score updated." }, { "date": "2026-07-15T02:53:48.580779Z", "number": "133", "summary": "Products created (1).| Product Identifiers created (1)." }, { "date": "2026-07-15T02:53:51.158784Z", "number": "134", "summary": "NCSC Score updated." }, { "date": "2026-07-20T10:47:51.612530Z", "number": "135", "summary": "References created (3)." }, { "date": "2026-07-20T10:47:55.730199Z", "number": "136", "summary": "NCSC Score updated." }, { "date": "2026-07-21T08:40:09.360389Z", "number": "137", "summary": "References created (3)." }, { "date": "2026-07-21T08:40:15.693651Z", "number": "138", "summary": "NCSC Score updated." }, { "date": "2026-07-22T13:23:50.344390Z", "number": "139", "summary": "References created (2)." }, { "date": "2026-07-22T13:24:06.532440Z", "number": "140", "summary": "NCSC Score updated." }, { "date": "2026-07-23T09:05:59.107735Z", "number": "141", "summary": "References created (2)." }, { "date": "2026-07-23T09:06:10.641459Z", "number": "142", "summary": "NCSC Score updated." }, { "date": "2026-07-23T14:45:53.515648Z", "number": "143", "summary": "EPSS updated." }, { "date": "2026-07-23T14:46:00.043905Z", "number": "144", "summary": "NCSC Score updated." }, { "date": "2026-07-24T10:35:13.013704Z", "number": "145", "summary": "References created (1)." }, { "date": "2026-07-24T10:35:20.336085Z", "number": "146", "summary": "NCSC Score updated." }, { "date": "2026-07-27T18:04:13.152710Z", "number": "147", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (1)." }, { "date": "2026-07-27T18:04:27.523213Z", "number": "148", "summary": "NCSC Score updated." }, { "date": "2026-07-27T18:04:38.547124Z", "number": "149", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (1)." }, { "date": "2026-07-28T02:41:39.159145Z", "number": "150", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-07-28T09:04:31.532924Z", "number": "151", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-07-28T11:09:23.119437Z", "number": "152", "summary": "Source connected.| CVE status created. (valid)| Products connected (3).| References created (8)." }, { "date": "2026-07-28T11:09:25.340688Z", "number": "153", "summary": "NCSC Score updated." }, { "date": "2026-07-28T15:25:20.901491Z", "number": "154", "summary": "References created (1)." }, { "date": "2026-08-04T08:05:40.023094Z", "number": "155", "summary": "References created (1)." }, { "date": "2026-08-04T08:05:43.256905Z", "number": "156", "summary": "NCSC Score updated." }, { "date": "2026-08-05T15:11:51.647990Z", "number": "157", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-08-05T15:13:19.650814Z", "number": "158", "summary": "NCSC Score updated." }, { "date": "2026-08-06T00:31:56.326084Z", "number": "159", "summary": "Product Threats created (1).| Product Threats removed (1).| Product Remediations removed (1)." }, { "date": "2026-08-07T12:05:36.783169Z", "number": "160", "summary": "References created (1)." }, { "date": "2026-08-07T12:05:58.865326Z", "number": "161", "summary": "NCSC Score updated." }, { "date": "2026-08-07T18:25:15.913420Z", "number": "162", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Product Remediations created (1).| CWES updated (1)." }, { "date": "2026-08-07T18:25:17.363622Z", "number": "163", "summary": "NCSC Score updated." }, { "date": "2026-08-10T13:32:35.838460Z", "number": "164", "summary": "References created (1)." }, { "date": "2026-08-10T13:32:44.406920Z", "number": "165", "summary": "NCSC Score updated." }, { "date": "2026-08-12T06:16:11.641595Z", "number": "166", "summary": "References created (1)." }, { "date": "2026-08-14T12:06:33.852035Z", "number": "167", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-08-14T12:06:40.097195Z", "number": "168", "summary": "NCSC Score updated." }, { "date": "2026-08-20T10:26:13.895053Z", "number": "169", "summary": "References created (1)." }, { "date": "2026-08-20T10:26:26.834232Z", "number": "170", "summary": "NCSC Score updated." }, { "date": "2026-08-21T06:20:31.669178Z", "number": "171", "summary": "CVSS updated.| Products removed (1)." }, { "date": "2026-08-21T09:39:01.993598Z", "number": "172", "summary": "References created (3)." }, { "date": "2026-08-21T09:39:09.398685Z", "number": "173", "summary": "NCSC Score updated." }, { "date": "2026-08-26T11:23:03.701892Z", "number": "174", "summary": "References created (1)." }, { "date": "2026-08-26T11:23:09.690663Z", "number": "175", "summary": "NCSC Score updated." }, { "date": "2026-08-27T09:53:20.110133Z", "number": "176", "summary": "References created (1)." }, { "date": "2026-08-28T04:15:14.769325Z", "number": "177", "summary": "Source connected.| CVE status created. (valid)| Products connected (4).| References created (27)." }, { "date": "2026-08-28T04:15:17.931155Z", "number": "178", "summary": "NCSC Score updated." }, { "date": "2026-09-01T13:02:00.579566Z", "number": "179", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-09-01T13:02:08.927522Z", "number": "180", "summary": "NCSC Score updated." }, { "date": "2026-09-01T20:04:29.996894Z", "number": "181", "summary": "Description removed for source.| Products removed (1)." }, { "date": "2026-09-02T06:44:45.496882Z", "number": "182", "summary": "Description created for source." }, { "date": "2026-09-02T10:40:27.905094Z", "number": "183", "summary": "EPSS updated." }, { "date": "2026-09-02T12:52:12.758981Z", "number": "184", "summary": "References created (1)." }, { "date": "2026-09-02T15:34:52.829956Z", "number": "185", "summary": "NCSC Score updated." }, { "date": "2026-09-03T14:31:45.898657Z", "number": "186", "summary": "EPSS updated." }, { "date": "2026-09-03T18:55:18.475462Z", "number": "187", "summary": "EPSS updated." }, { "date": "2026-09-04T08:02:55.601132Z", "number": "188", "summary": "NCSC Score updated." }, { "date": "2026-09-04T15:41:29.359962Z", "number": "189", "summary": "EPSS updated." }, { "date": "2026-09-04T15:41:30.472719Z", "number": "190", "summary": "NCSC Score updated." }, { "date": "2026-09-05T15:39:35.117198Z", "number": "191", "summary": "EPSS updated." }, { "date": "2026-09-06T15:40:48.045069Z", "number": "192", "summary": "EPSS updated." }, { "date": "2026-09-07T15:41:59.911480Z", "number": "193", "summary": "EPSS updated." }, { "date": "2026-09-08T04:03:19.419384Z", "number": "194", "summary": "NCSC Score updated." } ], "status": "interim", "version": "194" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330296", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "product_name", "name": "Amazon Linux 2" } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/2.4.67-1~deb12u2", "product": { "name": "vers:deb/2.4.67-1~deb12u2", "product_id": "CSAFPID-6620832", "product_identification_helper": { "purl": "pkg:deb/debian/apache2@2.4.67-1~deb12u2?distro=bookworm" } } } ], "category": "product_name", "name": "Apache" } ], "category": "product_family", "name": "bookworm" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1295663", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "product_name", "name": "Debian Linux" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:semver/2.4.66", "product": { "name": "vers:semver/2.4.66", "product_id": "CSAFPID-6565574" } } ], "category": "product_name", "name": "Apache HTTP Server" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.4.66", "product": { "name": "vers:unknown/2.4.66", "product_id": "CSAFPID-6575903", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:http_server:2.4.66:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "http_server" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.4.66", "product": { "name": "vers:unknown/2.4.66", "product_id": "CSAFPID-8672482" } } ], "category": "product_name", "name": "httpd" } ], "category": "vendor", "name": "Apache Software Foundation" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/azl3", "product": { "name": "vers:unknown/azl3", "product_id": "CSAFPID-5247946", "product_identification_helper": { "cpe": "cpe:/o:microsoft:azure_linux:azl3" } } } ], "category": "product_name", "name": "Azure Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-6211370", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_httpd_2.4.66-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 httpd 2.4.66-1 on Azure Linux 3.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-8948743", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:cbl2_httpd_2.4.66-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "cbl2 httpd 2.4.66-1" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-6697948", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:cbl2_httpd_2.4.66-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "cbl2 httpd 2.4.66-1 on CBL Mariner 2.0" } ], "category": "product_family", "name": "Open Source Software" } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/24.0.0-24.0.1", "product": { "name": "vers:unknown/24.0.0-24.0.1", "product_id": "CSAFPID-6015886", "product_identification_helper": { "cpe": "cpe:/a:ibm:business_automation_workflow:24.0.0_-_24.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/25.0.0-25.0.1", "product": { "name": "vers:unknown/25.0.0-25.0.1", "product_id": "CSAFPID-6015885", "product_identification_helper": { "cpe": "cpe:/a:ibm:business_automation_workflow:25.0.0_-_25.0.1" } } } ], "category": "product_name", "name": "Business Automation Workflow" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/11.0.0-11.0.0.05", "product": { "name": "vers:unknown/11.0.0-11.0.0.05", "product_id": "CSAFPID-7561258", "product_identification_helper": { "cpe": "cpe:/a:ibm:devops_code_clearcase:11.0.0_-_11.0.0.05" } } } ], "category": "product_name", "name": "DevOps Code ClearCase" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/8.5", "product": { "name": "vers:unknown/8.5", "product_id": "CSAFPID-39291", "product_identification_helper": { "cpe": "cpe:/a:ibm:http_server:8.5" } } }, { "category": "product_version_range", "name": "vers:unknown/9", "product": { "name": "vers:unknown/9", "product_id": "CSAFPID-1193548", "product_identification_helper": { "cpe": "cpe:/a:ibm:http_server:9.0" } } } ], "category": "product_name", "name": "HTTP Server" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1350170", "product_identification_helper": { "cpe": "cpe:/a:ibm:tivoli_monitoring:-" } } } ], "category": "product_name", "name": "IBM Tivoli Monitoring" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/10.0-10.0.10", "product": { "name": "vers:unknown/10.0-10.0.10", "product_id": "CSAFPID-8263564", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_clearquest:10.0_-_10.0.10" } } }, { "category": "product_version_range", "name": "vers:unknown/9.1-9.1.0.11", "product": { "name": "vers:unknown/9.1-9.1.0.11", "product_id": "CSAFPID-8263565", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_clearquest:9.1_-_9.1.0.11" } } } ], "category": "product_name", "name": "Rational ClearQuest" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/10.0.0-10.0.1.05", "product": { "name": "vers:unknown/10.0.0-10.0.1.05", "product_id": "CSAFPID-7561260", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_clearcase:10.0.0_-_10.0.1.05" } } }, { "category": "product_version_range", "name": "vers:unknown/9.1.0-9.1.0.10", "product": { "name": "vers:unknown/9.1.0-9.1.0.10", "product_id": "CSAFPID-7561259", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_clearcase:9.1.0_-_9.1.0.10" } } } ], "category": "product_name", "name": "Rational Clearcase" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317178", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "product_name", "name": "Fedora Linux" } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330519", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "product_name", "name": "Gentoo Linux" } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<2.4.67", "product": { "name": "vers:unknown/<2.4.67", "product_id": "CSAFPID-6609140" } } ], "category": "product_name", "name": "HTTP Server" } ], "category": "vendor", "name": "Apache" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1", "product": { "name": "vers:unknown/1", "product_id": "CSAFPID-39306", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1" } } } ], "category": "product_name", "name": "JBoss Core Services" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317175", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10", "product": { "name": "vers:rpm/10", "product_id": "CSAFPID-2858634", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439321", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439315", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439317", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1439319", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-6154979", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } } ], "category": "product_name", "name": "Red Hat Hardened Images" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2.4.67-0.1.hum1", "product": { "name": "vers:rpm/2.4.67-0.1.hum1", "product_id": "CSAFPID-6696707", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd@2.4.67-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } }, { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6616166" } } ], "category": "product_name", "name": "httpd" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2.4.67-0.1.hum1", "product": { "name": "vers:rpm/2.4.67-0.1.hum1", "product_id": "CSAFPID-6696708", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.67-0.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } } ], "category": "product_name", "name": "httpd-filesystem" } ], "category": "product_family", "name": "Red Hat Hardened Images" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-6014972", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } }, { "category": "product_version_range", "name": "vers:rpm/2.4.67-0.1.hum1|<*", "product": { "name": "vers:rpm/2.4.67-0.1.hum1|<*", "product_id": "CSAFPID-8821884", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } } ], "category": "product_name", "name": "Red Hat Hardened Images" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1439326", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1" } } }, { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1331602", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:-" } } } ], "category": "product_name", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2970156" } } ], "category": "product_name", "name": "httpd" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6616162" } } ], "category": "product_name", "name": "mod_http2" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2970157" } } ], "category": "product_name", "name": "httpd" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2970158" } } ], "category": "product_name", "name": "httpd" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2970159" } } ], "category": "product_name", "name": "httpd" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6616163" } } ], "category": "product_name", "name": "mod_http2" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2970160" } } ], "category": "product_name", "name": "httpd" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6616164" } } ], "category": "product_name", "name": "mod_http2" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6616167" } } ], "category": "product_name", "name": "mod_http2" } ], "category": "product_family", "name": "Red Hat JBoss Core Services" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:netapp/2.4.66", "product": { "name": "vers:netapp/2.4.66", "product_id": "CSAFPID-6764453" } } ], "category": "product_name", "name": "Multiple products incorporating Apache HTTP Server" } ], "category": "vendor", "name": "NetApp" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:oracle/>=6.1.1|<=7.0.0", "product": { "name": "vers:oracle/>=6.1.1|<=7.0.0", "product_id": "CSAFPID-6212729", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.1.1-7.0.0:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications Unified Assurance" } ], "category": "product_family", "name": "Oracle Communications" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317177", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "product_name", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330300", "product_identification_helper": { "cpe": "cpe:/o:resf:rocky_linux:-" } } } ], "category": "product_name", "name": "RESF Rocky Linux" } ], "category": "vendor", "name": "RESF" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317176", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "product_name", "name": "SUSE openSUSE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317174", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "product_name", "name": "SuSE Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8522993" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8522994" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8522995" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8522996" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product": { "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product_id": "CSAFPID-8507100" } } ], "category": "product_name", "name": "apache2" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product": { "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product_id": "CSAFPID-8507101" } } ], "category": "product_name", "name": "apache2-tls13" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server 12 SP5-LTSS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8522997" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server 15 SP4-LTSS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8522998" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server 15 SP5-LTSS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492280" } } ], "category": "product_name", "name": "apache2" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492281" } } ], "category": "product_name", "name": "apache2-devel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492282" } } ], "category": "product_name", "name": "apache2-event" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492283" } } ], "category": "product_name", "name": "apache2-manual" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492284" } } ], "category": "product_name", "name": "apache2-prefork" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492285" } } ], "category": "product_name", "name": "apache2-utils" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492286" } } ], "category": "product_name", "name": "apache2-worker" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server 16.0" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product": { "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product_id": "CSAFPID-8507102" } } ], "category": "product_name", "name": "apache2" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product": { "name": "vers:unknown/>=0|<2.4.66-35.78.1", "product_id": "CSAFPID-8507103" } } ], "category": "product_name", "name": "apache2-tls13" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8522999" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server for SAP Applications 15 SP4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product": { "name": "vers:unknown/>=0|<2.4.66-150400.6.57.1", "product_id": "CSAFPID-8523000" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server for SAP Applications 15 SP5" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492287" } } ], "category": "product_name", "name": "apache2" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492288" } } ], "category": "product_name", "name": "apache2-devel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492289" } } ], "category": "product_name", "name": "apache2-event" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492290" } } ], "category": "product_name", "name": "apache2-manual" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492291" } } ], "category": "product_name", "name": "apache2-prefork" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492292" } } ], "category": "product_name", "name": "apache2-utils" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-160000.2.1", "product_id": "CSAFPID-8492293" } } ], "category": "product_name", "name": "apache2-worker" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server for SAP applications 16.0" } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<5.36.00.16", "product": { "name": "vers:unknown/<5.36.00.16", "product_id": "CSAFPID-9103886" } } ], "category": "product_name", "name": "Secure Connect Gateway" } ], "category": "vendor", "name": "Dell" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330299", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "product_name", "name": "Ubuntu Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.4.48-3.1ubuntu3", "product": { "name": "vers:unknown/2.4.48-3.1ubuntu3", "product_id": "CSAFPID-6216869", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.48-3.1ubuntu3?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.48-3.1ubuntu4", "product": { "name": "vers:unknown/2.4.48-3.1ubuntu4", "product_id": "CSAFPID-6216870", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.48-3.1ubuntu4?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.51-2ubuntu1", "product": { "name": "vers:unknown/2.4.51-2ubuntu1", "product_id": "CSAFPID-6216871", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.51-2ubuntu1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu1", "product": { "name": "vers:unknown/2.4.52-1ubuntu1", "product_id": "CSAFPID-6216872", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu2", "product": { "name": "vers:unknown/2.4.52-1ubuntu2", "product_id": "CSAFPID-6216873", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4", "product": { "name": "vers:unknown/2.4.52-1ubuntu4", "product_id": "CSAFPID-6216874", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.1", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.1", "product_id": "CSAFPID-6216875", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.10", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.10", "product_id": "CSAFPID-6224254", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.10?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.11", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.11", "product_id": "CSAFPID-6224255", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.11?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.12", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.12", "product_id": "CSAFPID-6224256", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.12?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.13", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.13", "product_id": "CSAFPID-6224257", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.13?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.14", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.14", "product_id": "CSAFPID-6224258", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.14?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.15", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.15", "product_id": "CSAFPID-6224259", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.15?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.16", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.16", "product_id": "CSAFPID-6224260", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.16?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.18", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.18", "product_id": "CSAFPID-6621149", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.18?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.19", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.19", "product_id": "CSAFPID-6621150", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.19?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.2", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.2", "product_id": "CSAFPID-6216876", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.3", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.3", "product_id": "CSAFPID-6224247", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.3?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.4", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.4", "product_id": "CSAFPID-6224248", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.4?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.5", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.5", "product_id": "CSAFPID-6224249", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.5?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.6", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.6", "product_id": "CSAFPID-6224250", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.6?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.7", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.7", "product_id": "CSAFPID-6224251", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.7?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.8", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.8", "product_id": "CSAFPID-6224252", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.8?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.52-1ubuntu4.9", "product": { "name": "vers:unknown/2.4.52-1ubuntu4.9", "product_id": "CSAFPID-6224253", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.9?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.52-1ubuntu4.20", "product": { "name": "vers:unknown/>=0|<2.4.52-1ubuntu4.20", "product_id": "CSAFPID-6697126" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Ubuntu:22.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.4.57-2ubuntu2", "product": { "name": "vers:unknown/2.4.57-2ubuntu2", "product_id": "CSAFPID-6224262", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.57-2ubuntu2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.57-2ubuntu3", "product": { "name": "vers:unknown/2.4.57-2ubuntu3", "product_id": "CSAFPID-6224263", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.57-2ubuntu3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu1", "product": { "name": "vers:unknown/2.4.58-1ubuntu1", "product_id": "CSAFPID-6224264", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu2", "product": { "name": "vers:unknown/2.4.58-1ubuntu2", "product_id": "CSAFPID-6224265", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu6", "product": { "name": "vers:unknown/2.4.58-1ubuntu6", "product_id": "CSAFPID-6224266", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu6?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu7", "product": { "name": "vers:unknown/2.4.58-1ubuntu7", "product_id": "CSAFPID-6224267", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu7?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8", "product": { "name": "vers:unknown/2.4.58-1ubuntu8", "product_id": "CSAFPID-6224268", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.1", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.1", "product_id": "CSAFPID-6224269", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.10", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.10", "product_id": "CSAFPID-6621152", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.10?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.11", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.11", "product_id": "CSAFPID-6621153", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.11?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.2", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.2", "product_id": "CSAFPID-6224270", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.3", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.3", "product_id": "CSAFPID-6224271", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.4", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.4", "product_id": "CSAFPID-6224272", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.4?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.5", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.5", "product_id": "CSAFPID-6224273", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.5?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.6", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.6", "product_id": "CSAFPID-6224274", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.6?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.7", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.7", "product_id": "CSAFPID-6224275", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.7?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.58-1ubuntu8.8", "product": { "name": "vers:unknown/2.4.58-1ubuntu8.8", "product_id": "CSAFPID-6224276", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.8?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.58-1ubuntu8.12", "product": { "name": "vers:unknown/>=0|<2.4.58-1ubuntu8.12", "product_id": "CSAFPID-6697127" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Ubuntu:24.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.4.63-1ubuntu1", "product": { "name": "vers:unknown/2.4.63-1ubuntu1", "product_id": "CSAFPID-6224278", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.63-1ubuntu1?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.63-1ubuntu3", "product": { "name": "vers:unknown/2.4.63-1ubuntu3", "product_id": "CSAFPID-6224279", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.63-1ubuntu3?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.64-1ubuntu2", "product": { "name": "vers:unknown/2.4.64-1ubuntu2", "product_id": "CSAFPID-6224280", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.64-1ubuntu2?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.64-1ubuntu3", "product": { "name": "vers:unknown/2.4.64-1ubuntu3", "product_id": "CSAFPID-6224281", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.64-1ubuntu3?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.64-1ubuntu3.2", "product": { "name": "vers:unknown/2.4.64-1ubuntu3.2", "product_id": "CSAFPID-6621155", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.64-1ubuntu3.2?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.64-1ubuntu3.3", "product": { "name": "vers:unknown/2.4.64-1ubuntu3.3", "product_id": "CSAFPID-6621156", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.64-1ubuntu3.3?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.64-1ubuntu3.4", "product": { "name": "vers:unknown/>=0|<2.4.64-1ubuntu3.4", "product_id": "CSAFPID-6697128" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Ubuntu:25.10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.4.64-1ubuntu3", "product": { "name": "vers:unknown/2.4.64-1ubuntu3", "product_id": "CSAFPID-6621158", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.64-1ubuntu3?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.65-3ubuntu1", "product": { "name": "vers:unknown/2.4.65-3ubuntu1", "product_id": "CSAFPID-6621159", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.65-3ubuntu1?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.66-2ubuntu1", "product": { "name": "vers:unknown/2.4.66-2ubuntu1", "product_id": "CSAFPID-6621160", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.66-2ubuntu1?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.66-2ubuntu2", "product": { "name": "vers:unknown/2.4.66-2ubuntu2", "product_id": "CSAFPID-6621161", "product_identification_helper": { "purl": "pkg:deb/ubuntu/apache2@2.4.66-2ubuntu2?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.66-2ubuntu2.1", "product": { "name": "vers:unknown/>=0|<2.4.66-2ubuntu2.1", "product_id": "CSAFPID-6697129" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Ubuntu:26.04" } ], "category": "vendor", "name": "Ubuntu" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=2.4.66|<2.4.67", "product": { "name": "vers:unknown/>=2.4.66|<2.4.67", "product_id": "CSAFPID-6609318" } } ], "category": "product_name", "name": "apache" } ], "category": "vendor", "name": "Bitnami" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.67-r0", "product": { "name": "vers:unknown/>=0|<2.4.67-r0", "product_id": "CSAFPID-6769927" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Alpine:v3.20" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.67-r0", "product": { "name": "vers:unknown/>=0|<2.4.67-r0", "product_id": "CSAFPID-6609288" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Alpine:v3.21" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.67-r0", "product": { "name": "vers:unknown/>=0|<2.4.67-r0", "product_id": "CSAFPID-6609291" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Alpine:v3.22" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.67-r0", "product": { "name": "vers:unknown/>=0|<2.4.67-r0", "product_id": "CSAFPID-6609316" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Alpine:v3.23" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<2.4.67-r0", "product": { "name": "vers:unknown/>=0|<2.4.67-r0", "product_id": "CSAFPID-8259611" } } ], "category": "product_name", "name": "apache2" } ], "category": "product_family", "name": "Alpine:v3.24" } ], "category": "vendor", "name": "Alpine" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/sequoia <15.7.8", "product": { "name": "vers:unknown/sequoia <15.7.8", "product_id": "CSAFPID-8902272" } }, { "category": "product_version_range", "name": "vers:unknown/sonoma <14.8.8", "product": { "name": "vers:unknown/sonoma <14.8.8", "product_id": "CSAFPID-8902273" } }, { "category": "product_version_range", "name": "vers:unknown/tahoe <26.6", "product": { "name": "vers:unknown/tahoe <26.6", "product_id": "CSAFPID-8902271" } } ], "category": "product_name", "name": "macOS" }, { "branches": [ { "category": "product_version_range", "name": "vers:apple/15.7.8", "product": { "name": "vers:apple/15.7.8", "product_id": "CSAFPID-8900580" } } ], "category": "product_name", "name": "macOS Sequoia" }, { "branches": [ { "category": "product_version_range", "name": "vers:apple/14.8.8", "product": { "name": "vers:apple/14.8.8", "product_id": "CSAFPID-8900579" } } ], "category": "product_name", "name": "macOS Sonoma" } ], "category": "vendor", "name": "Apple" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-23918", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/23xxx/CVE-2026-23918.json" }, { "category": "description", "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-23918" }, { "category": "description", "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-apache-2026-23918.json?alt=media" }, { "category": "description", "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Alpine%2FALPINE-CVE-2026-23918.json?alt=media" }, { "category": "description", "text": "A flaw was found in Apache HTTP Server. This vulnerability, related to a double free error within the HTTP/2 protocol implementation, could potentially allow a remote attacker to execute arbitrary code. Successful exploitation could lead to a complete compromise of the affected system.\nThis issue marked as Important rather than Moderate because it involves a memory safety violation (double free) in the HTTP/2 request handling path, which is directly exposed to untrusted network input. A double free condition can corrupt the heap allocator’s internal metadata, enabling attackers to manipulate memory layout and potentially achieve arbitrary code execution (RCE) under favorable conditions. In this case, the flaw is triggered during an early stream reset in HTTP/2, meaning it can be exercised pre-authentication by a remote client without requiring complex application-level interaction. Given that Apache HTTP Server is widely deployed in internet-facing environments, even a low-probability RCE path significantly elevates risk.\nAdditionally, the vulnerability exists in a core protocol module rather than an optional edge feature, increasing the likelihood of exposure. It is also important to note that this vulnerability specifically affects Apache HTTP Server version 2.4.66 only, and our mod_http2 packages are not affected as they are built against non-vulnerable httpd versions.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-23918.json" }, { "category": "description", "text": "Apache HTTP Server: http2: double free and possible RCE on early reset", "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-May" }, { "category": "description", "text": "A flaw was found in Apache HTTP Server. This vulnerability, related to a double free error within the HTTP/2 protocol implementation, could potentially allow a remote attacker to execute arbitrary code. Successful exploitation could lead to a complete compromise of the affected system.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:13938.json" }, { "category": "description", "text": "Bartlomiej Dmitruk and Stanislaw Strzalkowski discovered that Apache\nHTTP Server incorrectly handled certain memory operations when using the\nHTTP/2 protocol. A remote attacker could use this issue to cause Apache\nHTTP Server to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS.\n(CVE-2026-23918)\n\nIt was discovered that the Apache HTTP Server mod_rewrite module\nincorrectly handled certain privileges. A local attacker could possibly use\nthis issue to obtain sensitive information. (CVE-2026-24072)\n\nAndrew Lacambra, Elhanan Haenel, Tianshuo Han, and Tristan Madani\ndiscovered that the Apache HTTP Server mod_proxy_ajp module incorrectly\nhandled certain AJP server messages. An attacker in control of a backend\nAJP server could use this issue to cause Apache HTTP Server to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2026-28780)\n\nPavel Kohout discovered that Apache HTTP Server did not properly limit\nresource allocation in mod_md when processing OCSP response data. A\nremote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2026-29168)\n\nPavel Kohout discovered that the Apache HTTP Server incorrectly handled\ncertain memory operations in mod_dav_lock. A remote attacker could possibly\nuse this issue to cause Apache HTTP Server to crash, resulting in a denial\nof service. (CVE-2026-29169)\n\nNitescu Lucian discovered that Apache HTTP Server had a timing attack\nvulnerability in mod_auth_digest. A remote attacker could possibly\nuse this issue to bypass Digest authentication. (CVE-2026-33006)\n\nPavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server\nincorrectly handled certain memory operations in mod_authn_socache. A\nremote attacker could possibly use this issue to cause Apache HTTP Server\nto crash, resulting in a denial of service. (CVE-2026-33007)\n\nHaruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that\nApache HTTP Server had an HTTP response splitting vulnerability in\nmultiple modules when used with untrusted or compromised backend\nservers. An attacker could possibly use this issue to inject arbitrary\nHTTP headers. (CVE-2026-33523)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could\npossibly use this issue to cause Apache HTTP Server to crash, resulting in\na denial of service. (CVE-2026-33857)\n\nTianshuo Han and Jérôme Djouder discovered that Apache HTTP Server\nincorrectly handled certain string operations in mod_proxy_ajp. A remote\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2026-34032)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could use\nthis issue to cause Apache HTTP Server to crash, resulting in a denial of\nservice, or possibly obtain sensitive information. (CVE-2026-34059)", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUSN-8239-1.json?alt=media" }, { "category": "description", "text": "Apache HTTP Server version 2.4.66 is susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, Denial of Service (DoS).", "title": "netapp - https://security.netapp.com/advisory/ntap-20260508-0008" }, { "category": "description", "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-23918.json?alt=media" }, { "category": "description", "text": "Vulnerability in the Oracle Communications Unified Assurance product of Oracle Communications (component: Core (Apache HTTP Server)). Supported versions that are affected are 6.1.1-7.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Unified Assurance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Unified Assurance accessible data.", "title": "oracle - https://www.oracle.com/a/tech/docs/security-alerts/cspumay2026csaf.json" }, { "category": "description", "text": "Vulnerability in the Oracle Communications Unified Assurance product of Oracle Communications (component: Core (Apache HTTP Server)). Supported versions that are affected are 6.1.1-7.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Unified Assurance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Unified Assurance accessible data.", "title": "oracle - https://www.oracle.com/docs/tech/security-alerts/cspumay2026csaf.json" }, { "category": "description", "text": "This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22199-1.json?alt=media" }, { "category": "description", "text": "This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22209-1.json?alt=media" }, { "category": "description", "text": "This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n\nNon security issue:\n\n- Update to 2.4.66 (jsc#PED-16334).\n", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:2686-1.json?alt=media" }, { "category": "description", "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-23918.json?alt=media" }, { "category": "description", "text": "This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. Impact: A remote attacker may be able to cause a denial-of-service", "title": "apple - https://support.apple.com/en-us/128072" }, { "category": "description", "text": "This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. Impact: A remote attacker may be able to cause a denial-of-service", "title": "apple - https://support.apple.com/en-us/128071" }, { "category": "description", "text": "Apache HTTP Server: http2: double free and possible RCE on early reset", "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Aug" }, { "category": "description", "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-23918" }, { "category": "other", "text": "0.49727", "title": "EPSS" }, { "category": "other", "text": "5.8", "title": "NCSC Score" }, { "category": "other", "text": "VENDOR FIX as product remediation category, Is related to (a version of) product Macos, The value of the most recent EPSS score, There is product data available from source Certbundde, Is related to (a version of) an uncommon product, Is related to a product by vendor Apple, There is product data available from source Oracle", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to a product by vendor Apache", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" } ], "product_status": { "first_fixed": [ "CSAFPID-6620832" ], "fixed": [ "CSAFPID-6696707", "CSAFPID-6696708", "CSAFPID-8900579", "CSAFPID-8900580" ], "known_affected": [ "CSAFPID-6565574", "CSAFPID-6575903", "CSAFPID-6609140", "CSAFPID-6609288", "CSAFPID-6609291", "CSAFPID-6609316", "CSAFPID-6609318", "CSAFPID-6014972", "CSAFPID-6616166", "CSAFPID-1295663", "CSAFPID-1330299", "CSAFPID-6216869", "CSAFPID-6216870", "CSAFPID-6216871", "CSAFPID-6216872", "CSAFPID-6216873", "CSAFPID-6216874", "CSAFPID-6216875", "CSAFPID-6216876", "CSAFPID-6224247", "CSAFPID-6224248", "CSAFPID-6224249", "CSAFPID-6224250", "CSAFPID-6224251", "CSAFPID-6224252", "CSAFPID-6224253", "CSAFPID-6224254", "CSAFPID-6224255", "CSAFPID-6224256", "CSAFPID-6224257", "CSAFPID-6224258", "CSAFPID-6224259", "CSAFPID-6224260", "CSAFPID-6224262", "CSAFPID-6224263", "CSAFPID-6224264", "CSAFPID-6224265", "CSAFPID-6224266", "CSAFPID-6224267", "CSAFPID-6224268", "CSAFPID-6224269", "CSAFPID-6224270", "CSAFPID-6224271", "CSAFPID-6224272", "CSAFPID-6224273", "CSAFPID-6224274", "CSAFPID-6224275", "CSAFPID-6224276", "CSAFPID-6224278", "CSAFPID-6224279", "CSAFPID-6224280", "CSAFPID-6224281", "CSAFPID-6621149", "CSAFPID-6621150", "CSAFPID-6621152", "CSAFPID-6621153", "CSAFPID-6621155", "CSAFPID-6621156", "CSAFPID-6621158", "CSAFPID-6621159", "CSAFPID-6621160", "CSAFPID-6621161", "CSAFPID-6697126", "CSAFPID-6697127", "CSAFPID-6697128", "CSAFPID-6697129", "CSAFPID-6211370", "CSAFPID-6764453", "CSAFPID-6769927", "CSAFPID-1317178", "CSAFPID-39291", "CSAFPID-1193548", "CSAFPID-1317175", "CSAFPID-5247946", "CSAFPID-6015885", "CSAFPID-6015886", "CSAFPID-1317176", "CSAFPID-7561258", "CSAFPID-7561259", "CSAFPID-7561260", "CSAFPID-1330296", "CSAFPID-1317174", "CSAFPID-1330300", "CSAFPID-6212729", "CSAFPID-1317177", "CSAFPID-1350170", "CSAFPID-8259611", "CSAFPID-8263564", "CSAFPID-8263565", "CSAFPID-39306", "CSAFPID-1331602", "CSAFPID-8492280", "CSAFPID-8492281", "CSAFPID-8492282", "CSAFPID-8492283", "CSAFPID-8492284", "CSAFPID-8492285", "CSAFPID-8492286", "CSAFPID-8492287", "CSAFPID-8492288", "CSAFPID-8492289", "CSAFPID-8492290", "CSAFPID-8492291", "CSAFPID-8492292", "CSAFPID-8492293", "CSAFPID-8522993", "CSAFPID-8522994", "CSAFPID-8522995", "CSAFPID-8522996", "CSAFPID-8522997", "CSAFPID-8522998", "CSAFPID-8522999", "CSAFPID-8523000", "CSAFPID-8672482", "CSAFPID-8902271", "CSAFPID-8902272", "CSAFPID-8902273", "CSAFPID-6697948", "CSAFPID-8948743", "CSAFPID-1330519", "CSAFPID-8507100", "CSAFPID-8507101", "CSAFPID-8507102", "CSAFPID-8507103", "CSAFPID-9103886" ], "known_not_affected": [ "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439321", "CSAFPID-1439326", "CSAFPID-2858634", "CSAFPID-2970156", "CSAFPID-2970157", "CSAFPID-2970158", "CSAFPID-2970159", "CSAFPID-2970160", "CSAFPID-6616162", "CSAFPID-6616163", "CSAFPID-6616164", "CSAFPID-6616167", "CSAFPID-8821884" ] }, "references": [ { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-23918" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/23xxx/CVE-2026-23918.json" }, { "category": "external", "summary": "Source - securityweek", "url": "https://www.securityweek.com/critical-high-severity-vulnerabilities-patched-in-apache-mina-http-server/" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1354.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Alpine%2FALPINE-CVE-2026-23918.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-apache-2026-23918.json?alt=media" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-23918" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-23918.json" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260506" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0134" }, { "category": "external", "summary": "Source - microsoft", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-May" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:13938.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUSN-8239-1.json?alt=media" }, { "category": "external", "summary": "Source - netapp", "url": "https://security.netapp.com/advisory/ntap-20260508-0008" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-23918.json?alt=media" }, { "category": "external", "summary": "Source - oracle", "url": "https://www.oracle.com/a/tech/docs/security-alerts/cspumay2026csaf.json" }, { "category": "external", "summary": "Source - oracle", "url": "https://www.oracle.com/docs/tech/security-alerts/cspumay2026csaf.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22199-1.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22209-1.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:2686-1.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-23918.json?alt=media" }, { "category": "external", "summary": "Source - apple", "url": "https://support.apple.com/en-us/128072" }, { "category": "external", "summary": "Source - apple", "url": "https://support.apple.com/en-us/128071" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260728" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0267" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2543.json" }, { "category": "external", "summary": "Source - microsoft", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Aug" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-23918" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:2641-1.json?alt=media" }, { "category": "external", "summary": "News - securityweek", "url": "https://www.securityweek.com/critical-high-severity-vulnerabilities-patched-in-apache-mina-http-server/" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "http://www.openwall.com/lists/oss-security/2026/05/04/19" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; nvd; osv; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:13938" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-23918" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465304" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; netapp; nvd; osv; redhat", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23918.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-21391.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-30845.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-34109.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:17080" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:21391" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:21433" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:22140" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:27200" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:27201" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:30845" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:34109" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:36373" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:36831" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:36846" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:41906" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:42828" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:47046" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:52393" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:53371" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:56869" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:57641" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:57642" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:57844" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:62165" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3314.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-707b7050da" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c9b72de46a" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:21391" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:21433" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:22140" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:30845" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:34109" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:41906" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:42828" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-21433.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-22140.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-25090.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-30844.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-41906.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-42828.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-59347.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-60004-0.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00027.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QXUJOPWBNZ54K6TKGJII6ZDPD5EHDYHZ/" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263956" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263957" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1264150" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1264163" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-23918" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-24072" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-28780" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-29168" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-29169" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-33006" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-33007" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-33523" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-33857" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-34032" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-34059" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622199-1/" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263935" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263950" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263951" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263952" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263953" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263954" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1263955" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622209-1/" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1207327" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1208708" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1214357" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/690734" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262641-1/" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267503" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267955" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267956" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267962" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267963" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267965" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267969" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267970" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267971" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267972" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267976" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267977" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1267978" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2006-20001" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2021-44224" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2021-44790" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-22719" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-22720" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-22721" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-23943" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-26377" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-28614" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-28615" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-29404" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-30522" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-30556" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-31813" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-36760" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2022-37436" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2023-25690" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2023-27522" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2023-31122" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2023-38709" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2023-45802" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-24795" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-27316" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE6KE5CJCPUP5Q74XSTDTPNHBY6OS3Q3/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026889.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026894.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/027008.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/027074.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026375.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026376.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://msrc.microsoft.com/update-guide/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://security-tracker.debian.org/tracker/DSA-6248-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://security.gentoo.org/glsa/202608-05" }, { "category": "external", "summary": "Reference - certbundde; osv", "url": "https://ubuntu.com/security/notices/USN-8239-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://ubuntu.com/security/notices/USN-8396-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://ubuntu.com/security/notices/USN-8571-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://ubuntu.com/security/notices/USN-8589-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1354.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1354" }, { "category": "external", "summary": "Reference - certbundde; osv; redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-23918" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24072" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28780" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-29168" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-29169" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33006" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33007" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33523" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33857" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34032" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34059" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.dell.com/support/kbdoc/000503504/dsa-2026-386-security-update-f" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7272621" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7272831" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7273764" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7275398" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7275632" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.striga.ai/research/apache-httpd-mod-http2-double-free" }, { "category": "external", "summary": "Reference - osv", "url": "https://security.alpinelinux.org/vuln/CVE-2026-23918" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-38473" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-38474" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-38475" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-38476" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-38477" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-39573" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-39884" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-40725" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-42516" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-43204" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2024-47252" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-23048" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-49630" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-49812" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-53020" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-55753" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-58098" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-65082" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2025-66200" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-29167" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-29170" }, { "category": "external", "summary": "Reference - osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23918" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://images.redhat.com/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13938.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-23918" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-24072" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-28780" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-29168" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-29169" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-33006" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-33007" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-33523" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-33857" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-34032" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-34059" }, { "category": "external", "summary": "Reference - oracle", "url": "https://www.oracle.com/docs/tech/security-alerts/cspumay2026csaf.json" }, { "category": "external", "summary": "Reference - oracle", "url": "https://www.oracle.com/security-alerts/cspumay2026.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/mac-123456789-lab/cve-2026-39875-macos-cups-lpe" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/vschko/CaseStudies/tree/main/CVE-2026-39868" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.apple.com/archives/list/security-announce@lists.apple.com/thread/6UHEM4V3BFNU73GLKO4ZM3UYJMOZJE3D/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.apple.com/archives/list/security-announce@lists.apple.com/thread/MISDQNJRC3W6IM64UCNJF27GGF2IKAYH/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.apple.com/archives/list/security-announce@lists.apple.com/thread/S7TKZCT5AE7BTXFUIEIB6K6DOKAMLYX4/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://support.apple.com/en-us/128067" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://support.apple.com/en-us/128071" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://support.apple.com/en-us/128072" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2543.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2543" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-34355" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-34356" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42535" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42536" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-43951" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-44119" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-44185" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-44186" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-44631" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-48913" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-49975" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262686-1/" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23918.json" } ], "remediations": [ { "category": "mitigation", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439321", "CSAFPID-1439326", "CSAFPID-2858634", "CSAFPID-2970156", "CSAFPID-2970157", "CSAFPID-2970158", "CSAFPID-2970159", "CSAFPID-2970160", "CSAFPID-6014972", "CSAFPID-6616162", "CSAFPID-6616163", "CSAFPID-6616164", "CSAFPID-6616166", "CSAFPID-6616167" ] }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/", "product_ids": [ "CSAFPID-6154979", "CSAFPID-6696707", "CSAFPID-6696708" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:13938" }, { "category": "workaround", "details": "To mitigate this issue, disable the `mod_http2` module in your Apache HTTP Server configuration. This can be achieved by commenting out or removing the `LoadModule http2_module modules/mod_http2.so` line in the Apache configuration file (e.g., `/etc/httpd/conf.modules.d/00-base.conf` or a similar configuration file). After modifying the configuration, restart the httpd service for the changes to take effect. This action will impact services relying on HTTP/2 functionality.", "product_ids": [ "CSAFPID-6154979", "CSAFPID-6696707", "CSAFPID-6696708" ] }, { "category": "vendor_fix", "details": "CBL-Mariner Releases", "product_ids": [ "CSAFPID-6211370" ] }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "CSAFPID-6212729" ], "url": "https://support.oracle.com/support/?documentId=CPU166" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1193548", "CSAFPID-1295663", "CSAFPID-1317174", "CSAFPID-1317175", "CSAFPID-1317176", "CSAFPID-1317177", "CSAFPID-1317178", "CSAFPID-1330296", "CSAFPID-1330299", "CSAFPID-1330300", "CSAFPID-1330519", "CSAFPID-1331602", "CSAFPID-1350170", "CSAFPID-39291", "CSAFPID-39306", "CSAFPID-5247946", "CSAFPID-6014972", "CSAFPID-6015885", "CSAFPID-6015886", "CSAFPID-6211370", "CSAFPID-6212729", "CSAFPID-6216869", "CSAFPID-6216870", "CSAFPID-6216871", "CSAFPID-6216872", "CSAFPID-6216873", "CSAFPID-6216874", "CSAFPID-6216875", "CSAFPID-6216876", "CSAFPID-6224247", "CSAFPID-6224248", "CSAFPID-6224249", "CSAFPID-6224250", "CSAFPID-6224251", "CSAFPID-6224252", "CSAFPID-6224253", "CSAFPID-6224254", "CSAFPID-6224255", "CSAFPID-6224256", "CSAFPID-6224257", "CSAFPID-6224258", "CSAFPID-6224259", "CSAFPID-6224260", "CSAFPID-6224262", "CSAFPID-6224263", "CSAFPID-6224264", "CSAFPID-6224265", "CSAFPID-6224266", "CSAFPID-6224267", "CSAFPID-6224268", "CSAFPID-6224269", "CSAFPID-6224270", "CSAFPID-6224271", "CSAFPID-6224272", "CSAFPID-6224273", "CSAFPID-6224274", "CSAFPID-6224275", "CSAFPID-6224276", "CSAFPID-6224278", "CSAFPID-6224279", "CSAFPID-6224280", "CSAFPID-6224281", "CSAFPID-6565574", "CSAFPID-6575903", "CSAFPID-6609140", "CSAFPID-6609288", "CSAFPID-6609291", "CSAFPID-6609316", "CSAFPID-6609318", "CSAFPID-6616166", "CSAFPID-6621149", "CSAFPID-6621150", "CSAFPID-6621152", "CSAFPID-6621153", "CSAFPID-6621155", "CSAFPID-6621156", "CSAFPID-6621158", "CSAFPID-6621159", "CSAFPID-6621160", "CSAFPID-6621161", "CSAFPID-6697126", "CSAFPID-6697127", "CSAFPID-6697128", "CSAFPID-6697129", "CSAFPID-6697948", "CSAFPID-6764453", "CSAFPID-6769927", "CSAFPID-7561258", "CSAFPID-7561259", "CSAFPID-7561260", "CSAFPID-8259611", "CSAFPID-8263564", "CSAFPID-8263565", "CSAFPID-8492280", "CSAFPID-8492281", "CSAFPID-8492282", "CSAFPID-8492283", "CSAFPID-8492284", "CSAFPID-8492285", "CSAFPID-8492286", "CSAFPID-8492287", "CSAFPID-8492288", "CSAFPID-8492289", "CSAFPID-8492290", "CSAFPID-8492291", "CSAFPID-8492292", "CSAFPID-8492293", "CSAFPID-8507100", "CSAFPID-8507101", "CSAFPID-8507102", "CSAFPID-8507103", "CSAFPID-8522993", "CSAFPID-8522994", "CSAFPID-8522995", "CSAFPID-8522996", "CSAFPID-8522997", "CSAFPID-8522998", "CSAFPID-8522999", "CSAFPID-8523000", "CSAFPID-8672482", "CSAFPID-8902271", "CSAFPID-8902272", "CSAFPID-8902273", "CSAFPID-8948743", "CSAFPID-9103886" ] } ], "threats": [ { "category": "impact", "details": "Disclosure of sensitive information, addition or modification of data, Denial of Service (DoS).", "product_ids": [ "CSAFPID-6764453" ] } ], "title": "CVE-2026-23918" } ] }