CVE-2026-44185

Published: Giu 08, 2026 Last Modified: Giu 08, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,3

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: low

Integrity: low

Availability: low

AI Translation Available

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.

126

Draft

Abstraction: Variant Structure: Simple

Security Scopes Affected:

Confidentiality Availability Integrity

Potential Impacts:

Read Memory Bypass Protection Mechanism Dos: Crash, Exit, Or Restart

Languages: Memory-Unsafe, C, C++