Security40 mOctober 6, 2026, 07:40

Apache httpd 2.4.69 fixes 20 CVEs, including a 9.8 privilege flaw

Apache HTTP Server 2.4.69 patches 20 CVEs, three of which score 9.8 under CVSSv3. One is CVE-2026-59797, a CWE-269 improper privilege management flaw affecting versions 2.4.0 through 2.4.68.

DEV Community

Open source

Apache HTTP Server 2.4.69 fixes 20 CVEs, three rated 9.8
CVE-2026-59797 is CWE-269 improper privilege management, not a crash
Affected versions span Apache httpd 2.4.0 through 2.4.68
ZoomEye matches 596,268,040 instances for app="Apache httpd"

#Apache

Apache fixes CVE-2026-63292 in httpd 2.4.69: stack overflow in mod_vhost_alias

Security

CERT-BUND flags 36 CVEs in 16 Drupal projects, CVSS 9.8

Security

Ghost CMS discloses six CVEs, including CVSS 8.1 staff session bypass

Security

Apache httpd 2.4.69 fixes 20 CVEs, including a 9.8 privilege flaw

Apache fixes CVE-2026-63292 in httpd 2.4.69: stack overflow in mod_vhost_alias

CERT-BUND flags 36 CVEs in 16 Drupal projects, CVSS 9.8

Ghost CMS discloses six CVEs, including CVSS 8.1 staff session bypass

Gitea 1.27.1 fixes CVE-2026-60004 rated 9.8