Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Apache HTTP Server 2 can run unwanted code

published 27 days ago
Summary

The Apache HTTP Server version 2 package (apache2) may let an attacker cause the server to execute code they provide. This could let them take control of the web server or steal data. Install the latest security updates for Apache HTTP Server or apply the vendor’s recommended patch as soon as possible.

What to do
  • Update cleanstart apache2 to version 2.4.46-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart apache2 < 2.4.46-r0
Fix: upgrade to 2.4.46-r0
Original advisory text
Apache HTTP Server versions 2
Security vulnerability affects the apache2 package. Apache HTTP Server versions 2.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Timeline
Published9 Oct 2026
Updated9 Oct 2026
First seen9 Oct 2026
Sources
CLEANSTART-2026-LV72653 · OSV
Track software like this
Free during beta