Search: CVE-2026-43951

An out-of-bounds read vulnerability (CWE-125) exists in Apache HTTP Server versions from 2.4.0 through 2.4.67 when using mod_headers and mod_mime with multiple response languages. This flaw could allow an attacker to read memory outside the intended buffer. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.