Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Apache HTTP Server Unauthenticated Remote Code Execution

MINI-j65v-4qcc-f6p9
Summary

Apache HTTP Server versions 2.4.49 to 2.4.53 are affected by a vulnerability that could allow an attacker to execute malicious code on a server without needing a password. This could lead to unauthorized access and data theft. Users should upgrade to a fixed version of Apache HTTP Server as soon as possible.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versionsFix available
harbor-2.11 All versions
harbor-2.11-jobservice All versions
harbor-2.11-portal All versions
harbor-2.11-portal-nginx-config All versions
harbor-2.11-registryctl All versions
Original title
MINI-j65v-4qcc-f6p9
Published: 10 Mar 2026 · Updated: 13 Mar 2026 · First seen: 10 Mar 2026