Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Apache HTTP Server on Debian Allows Unauthenticated File Access
DEBIAN-CVE-2026-34000
Summary
A vulnerability in Debian's Apache HTTP Server package allows attackers to access files without a password. This affects Debian systems running this server software. To protect your system, update the Apache HTTP Server package to the latest version.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | xorg-server | All versions |
| Debian:12 | debian | xorg-server | All versions |
| Debian:13 | debian | xorg-server | All versions |
| Debian:14 | debian | xorg-server | All versions |
| Debian:12 | debian | xwayland | All versions |
| Debian:13 | debian | xwayland | All versions |
| Debian:14 | debian | xwayland | All versions |
Original title
DEBIAN-CVE-2026-34000
- https://security-tracker.debian.org/tracker/CVE-2026-34000 Vendor Advisory
Published: 14 Apr 2026 · Updated: 14 Apr 2026 · First seen: 14 Apr 2026