CVE-2026-34032

Summary

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Affected Software

Weaknesses

• CWE-170: CWE-170 Improper Null Termination
• CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2026/05/04/16

References

• https://httpd.apache.org/security/vulnerabilities_24.html

• ←Previous
• Next→