7.5 HighCWE-122
CVE-2026-34355
Apache HTTP Server: mod_proxy_html buffer overflow
Apache Software FoundationApache HTTP Server
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
1.2%probability of exploitation in the next 30 days
Higher than 66% of scored CVEs
SeverityCVSS
7.5High
Description NVD
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
Coverage 1 article · 1 outlet
- Apache HTTP Server 2.4.68 fixes critical bugs to protect systemsSecurityOnline · first in our coverage · mentions it in passing