Search: CVE-2026-28780

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.4%	CVE-2026-28780Apache HTTP Server · Heap-based Buffer Overflow Critical9.8EPSS 1.4%2026-05-05CVE Database V5CVE-2026-28780 Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue. EPSS 1.4%Vulnerability Apache Software Foundation CWE-122	CVE Database V5	2026-05-05

Page 1 of 1 · 2 duplicate CVE records merged