CVE-2026-47360

Published: Ott 01, 2026 Last Modified: Ott 01, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: none

Availability: none

AI Translation Available

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.

When SessionCookieRemove changes across internal redirects, the session cookie may still be passed to a backend server.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

200

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Confidentiality

Potential Impacts:

Read Application Data

Technologies: Not Technology-Specific, Web Based, Mobile

Likelihood of Exploit: High