CVE-2026-56449

Apache HTTP Server out-of-bounds write in mod_proxy_html

high · 7.5

Apache HTTP Server

Published Oct 1, 2026, 16:06 UTC

Description

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.