Threat Intelligence Database

CVE-2026-114460 is an off-by-one pointer calculation error in the pbuchbinder mod_qos module. This flaw occurs when merging request body parameters with an existing URL query string, causing truncation of the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker can exploit this to bypass configured security rules by submitting crafted requests that conceal prohibited values from inspection. The vulnerability has a medium severity with a CVSS score of 5.3.

CVE-2026-114459 is a low-severity vulnerability in the pbuchbinder mod_qos module where improper boundary checking during HTTP response body inspection can lead to out-of-bounds reads. An unauthenticated remote attacker can exploit this flaw by triggering crafted server responses, causing an Apache worker process to crash and resulting in a denial of service. The vulnerability affects specific versions 11.74, 11.76, and 11.79 of mod_qos. There is no indication of data confidentiality or integrity impact, and no known exploits in the wild have been reported. The CVSS score is 3.7, reflecting low severity due to the requirement for high attack complexity and no privileges or user interaction needed.

CVE-2026-114458 is a medium severity vulnerability in the pbuchbinder mod_qos module. It allows an unauthenticated remote attacker to cause a Denial of Service (DoS) by exploiting an out-of-bounds write when connection rate monitoring is enabled. The module fails to properly check array boundaries when recording client IP addresses, leading to heap memory corruption and potential web server crashes. The vulnerability affects versions 11.74, 11.76, and 11.79 of mod_qos.

CVE-2026-114457 is a vulnerability in the pbuchbinder mod_qos module where improper null termination during processing of percent-encoded JSON input can cause an Apache worker process to crash. This flaw allows an unauthenticated remote attacker to trigger a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. The issue results from reading past allocated memory boundaries due to improper string termination.