CVE-2026-49975

HighCVSS 7.5

Published: 08/06/2026(UTC)Updated: 19/08/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

27.98%

98th percentile - higher than 98% of all known CVEs

Summary

A memory allocation with excessive size vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. Affects versions 2.4.17 through 2.4.67.

Risk Assessment

An attacker can send a specially crafted HTTP request, causing memory exhaustion and server unavailability.

Recommendation

Update Apache HTTP Server to version 2.4.68 or later, which includes the fix.

Original NVD description (English source)

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.