Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Apache Directory LDAP API 2.1.9 Security Update for CVE-2026-103877
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
Apache HTTP Server Vulnerability Update Fixes Code Execution and Memory Flaws
Apache released HTTP Server 2.4.69 on October 1, 2026, to fix security faults ranging from unwanted code execution to mishandled web responses.
Apache APISIX Vulnerabilities Let Attackers Impersonate Users and Bypass Protected Routes
Apache detailed two Apache APISIX vulnerabilities in notices issued on October 1, 2026.
Apache APISIX Denial of Service Flaw Can Disrupt Web Traffic
Apache disclosed CVE-2026-94250 on October 1, 2026, warning that public access to a batch-request endpoint can let an attacker exhaust a gateway worker's memor…
Apache Camel Vulnerability Can Expose Files and Internal Services
Apache's September 30, 2026 advisory, CVE-2026-88789, warns that an XML document can make an affected Camel Quarkus application read files or contact internal …
Debian libapache2-mod-auth-openidc Key Denial of Service Patch DSA-6504-1
It was discovered that incorrect state cookie parsing in mod_auth_openidc, an OpenID Certified authentication and authorisation module for the Apache HTTP serv…
Gentoo Apache HTTPD High Remote Execution Risk GLSA-202608-05
Gentoo Linux has issued a high-severity security advisory for Apache HTTPD, highlighting multiple vulnerabilities that could allow remote code execution, urgin…
SUSE Apache Commons Compress Moderate Arbitrary File Write Vuln 2026-3225-1
SUSE released a security update addressing CVE-2026-26032, which allows arbitrary file writes, alongside updates for apache-commons-compress and apache-ivy, ap…
openSUSE Tumbleweed apache-sshd Moderate Security Issue 2026-11327-1
An update for openSUSE Tumbleweed addresses four security vulnerabilities in the apache-sshd-2.19.0-2.1 package, enhancing system protection against identified…
Mageia Apache Critical Security Issues Advisory 2026-0289 CVE-2026-29167
Mageia released updates for security vulnerabilities in Apache HTTP Server affecting versions 10 and 9, addressing multiple issues including buffer overflows a…
Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2
A regression was introduced in Apache Commons BeanUtils affecting Ubuntu 16.04 LTS due to an incomplete fix for CVE-2014-0114 and CVE-2019-10086, which could a…
Ubuntu 16.04 libapache-mod-jk Important Fix for DoS Issue USN-8369-2
Ubuntu issued a security notice regarding a regression in libapache-mod-jk affecting version 16.04 LTS, reintroducing a fix for CVE-2023-41081 due to a previou…
Ubuntu 26.04 Apache MINA Important Remote Code Execution Vuln 8465-1
Apache MINA could be made to run programs if it received specially crafted network traffic.
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envo…
Debian 11 Apache2 High Remote Code Exec Privilege Escalation DLA-4571-1
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in remote code execution, privilege escalation, denial of service or …
Mageia 9 Apache Security Fix RCE Buffer Overflow MGASA-2026-0129
MGASA-2026-0129 - Updated apache packages fix security vulnerabilities
Debian 11 Apache2 Critical Remote Code Execution Advisory DLA-4571-1
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in remote code execution, privilege escalation, denial of service or …
Debian DSA-6248-1 Apache2 Critical RCE Privilege Escalation Risks
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in remote code execution, privilege escalation, denial of service or …
Ubuntu 25.10 Apache2 Regression Patch USN-7968-2 CVE-2025-55753
USN-7968-1 introduced a regression in Apache HTTP Server
Debian 11: apache-log4j2 Critical MitM TLS Issue DLA-4444-1 CVE-2025-68161
In Apache Log4j2, a Java Logging Framework, the Socket Appender does not perform TLS hostname verification of the peer certificate, even when the verifyHostNam…
Mageia 9: Apache Important Security Update MGASA-2025-0322 CVE-2025-55753
MGASA-2025-0322 - Updated apache packages fix security vulnerabilities
Mageia 9: Apache Important Security Issues MGASA-2025-0301
MGASA-2025-0301 - Updated apache packages fix security vulnerabilities
Mageia 9: Apache Commons BeanUtils Important Fix for CVE-2025-48734
MGASA-2025-0299 - Updated apache-commons-beanutils packages fix security vulnerability
Mageia: Apache Commons FileUpload Important DoS Advisory MGASA-2025-0296
MGASA-2025-0296 - Updated apache-commons-fileupload packages fix security vulnerability