CVE-2026-44631

CriticalCVSS 9.8

Published: 08/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

39th percentile - higher than 39% of all known CVEs

Summary

Buffer Underwrite vulnerability in Apache HTTP Server when processing crafted regular expressions in configuration. Affects versions 2.4.0 through 2.4.67.

Risk Assessment

Risk of remote code execution or server crash, potentially leading to service disruption.

Recommendation

Upgrade Apache HTTP Server to version 2.4.68, which fixes the issue.

Original NVD description (English source)

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.