PT-2026-47325 · Apache+2 · Apache Http Server+2

Bartlomiej Dmitruk · CVE-2026-44631 · Published 2026-04-27 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67

Description A buffer underwrite issue exists when using crafted regular expressions within the configuration.

Recommendations Upgrade to version 2.4.68.

Fix

Weakness Enumeration

CWE-124

Related Identifiers

ALSA-2026:34109

ALSA-2026:41906

ALSA-2026:42828

BDU:2026-09752

BIT-APACHE-2026-44631

CVE-2026-44631

ECHO-783E-A034-5304

OPENSUSE-SU-2026:21235-1

RHSA-2026:25042

RHSA-2026:34109

SUSE-SU-2026:22564-1

SUSE-SU-2026:2686-1

SUSE-SU-2026:2717-1

SUSE-SU-2026:2735-1

SUSE-SU-2026:2759-1

USN-8516-1

USN-8571-1

Affected Products

Apache Http Server

Linuxmint

Rocky Linux

References · 192

• https://osv.dev/vulnerability/SUSE-SU-2026:2759-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44186 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:42828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34355 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33523 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-44631 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8516-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:2717-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:2735-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:21235-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-41906.html · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-44631 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8516-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:42828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44631 · Vendor Advisory