VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 8, 2026· Updated Jun 11, 2026

CVE-2026-43951

CVE-2026-43951

Description

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Apache/HTTP Server2 versions
    cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*range: >=2.4.0,<=2.4.67
    • (no CPE)range: 2.4.0 through 2.4.67
  • osv-coords2 versions
    pkg:bitnami/apachepkg:rpm/almalinux/mod_http2
    >= 2.4.0, < 2.4.68+ 1 more
    • (no CPE)range: >= 2.4.0, < 2.4.68
    • (no CPE)range: < 2.0.29-4.el10_2.2

Patches

Vulnerability mechanics

References

2

News mentions

2