The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2686-1 advisory.

    This update for apache2 fixes the following issues

    - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).
    - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).
    - CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).
    - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
    - CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).
    - CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests     (bsc#1263956).
    - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
    - CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).
    - CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to     crash a child       processes (bsc#1263954).
    - CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).
    - CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).
    - CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check     (bsc#1263951).
    - CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).
    - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
    - CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
    - CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
    - CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
    - CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).
    - CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
    - CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).
    - CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a     denial of       service (bsc#1267970).
    - CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
    - CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-     free       (bsc#1267972).
    - CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).

    Non security issue:

    - Update to 2.4.66 (jsc#PED-16334).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6248 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6248-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 06, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : apache2     CVE ID         : CVE-2026-23918 CVE-2026-24072 CVE-2026-28780 CVE-2026-29168                      CVE-2026-29169 CVE-2026-33006 CVE-2026-33007 CVE-2026-33523                      CVE-2026-33857 CVE-2026-34032 CVE-2026-34059     Debian Bug     : 1135737

    Multiple vulnerabilities have been discovered in the Apache HTTP server,     which may result in remote code execution, privilege escalation, denial     of service or information disclosure.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 2.4.67-1~deb12u2.

    For the stable distribution (trixie), these problems have been fixed in     version 2.4.67-1~deb13u2. The fix for CVE-2026-23918 was already     included in the Debian 13.4 point release update versioned     2.4.66-1~deb13u2 to address reported HTTP/2 regressions.

    We recommend that you upgrade your apache2 packages.

    For the detailed security status of apache2 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/apache2

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2641-1 advisory.

    This update for apache2 fixes the following issues

    Update to 2.4.66 (jsc#PED-16334):

    Security issues:

    - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).
    - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).
    - CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).
    - CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).
    - CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests     (bsc#1263956).
    - CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).
    - CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to     crash a child       processes (bsc#1263954).
    - CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).
    - CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).
    - CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check     (bsc#1263951).
    - CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).

    Non security issue:

    - Internal server error on very long URL (bsc#690734).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the httpd package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2103-1 advisory.

    This update for apache2 fixes the following issues

    - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).
    - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).
    - CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).
    - CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).
    - CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests     (bsc#1263956).
    - CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).
    - CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to     crash a child       processes (bsc#1263954).
    - CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).
    - CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).
    - CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check     (bsc#1263951).
    - CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.8. It is, therefore, affected by multiple vulnerabilities:

  - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS     26.5.2, macOS Tahoe 26.5.2. An app may be able to cause unexpected system termination or write kernel     memory. (CVE-2026-43724)

  - This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS     26.5.2, macOS Tahoe 26.5.2. An app may be able to cause unexpected system termination or corrupt kernel     memory. (CVE-2026-39868)

  - An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.
    An app may be able to access sensitive user data. (CVE-2025-43325)

  - Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue     affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the     issue. (CVE-2026-23918)

  - A logic issue was addressed with improved file handling. This issue is fixed in macOS Tahoe 26.5. A     maliciously crafted ZIP archive may bypass Gatekeeper checks. (CVE-2026-28914)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6. It is, therefore, affected by multiple vulnerabilities:

  - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6,     iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted     web content may lead to an unexpected Safari crash. (CVE-2026-64783)

  - A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6     and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6,     watchOS 26.6. An app may be able to cause unexpected system termination. (CVE-2026-64775)

  - Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue     affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the     issue. (CVE-2026-23918)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS     Tahoe 26.6. A malicious app may be able to corrupt memory of a system process. (CVE-2026-28911)

  - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS     Tahoe 26.6. A user may be able to elevate privileges. (CVE-2026-28912)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202608-05 (Apache HTTPD: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers     referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apache httpd installed on the remote host is prior to 2.4.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.67 advisory.

  - Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects     to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause     it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache     HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
    (CVE-2026-28780)

  - An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess     authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version     2.4.67, which fixes this issue. (CVE-2026-24072)

  - Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue     affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the     issue. (CVE-2026-23918)

  - Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP     response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to     upgrade to version 2.4.67, which fixes the issue. (CVE-2026-29168)

  - A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker     to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.
    The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version     1.2.0. Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.
    (CVE-2026-29169)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1724 advisory.

    Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

    This issue affects Apache HTTP Server: 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-23918)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
324047	SUSE SLES15: apache2 / apache2-devel / apache2-doc / apache2-prefork / etc (SUSE-SU-2026:2686-1)	Nessus	SuSE Local Security Checks	2026/7/1	2026/7/1	high
312666	Debian dsa-6248 : apache2 - security update	Nessus	Debian Local Security Checks	2026/5/6	2026/5/6	critical
323050	SUSE SLES12: apache2 / apache2-devel / apache2-doc / apache2-example-pages / etc (SUSE-SU-2026:2641-1)	Nessus	SuSE Local Security Checks	2026/6/26	2026/8/29	high
314595	Photon OS 4.0: Httpd PHSA-2026-4.0-1014	Nessus	PhotonOS Local Security Checks	2026/5/14	2026/5/21	critical
317656	SUSE SLES15 Security Update : apache2 (SUSE-SU-2026:2103-1)	Nessus	SuSE Local Security Checks	2026/5/29	2026/5/29	critical
330136	macOS 14.x < 14.8.8 Multiple Vulnerabilities (128072)	Nessus	MacOS X Local Security Checks	2026/7/27	2026/8/28	critical
330144	macOS 26.x < 26.6 Multiple Vulnerabilities (128067)	Nessus	MacOS X Local Security Checks	2026/7/27	2026/8/28	critical
335265	GLSA-202608-05 : Apache HTTPD: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2026/8/13	2026/8/17	high
333875	Photon OS 5.0: Httpd PHSA-2026-5.0-91-0848	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/10	high
311940	Apache 2.4.x < 2.4.67 Multiple Vulnerabilities	Nessus	Web Servers	2026/5/4	2026/8/26	high
316957	Amazon Linux 2023 : mod_http2 (ALAS2023-2026-1724)	Nessus	Amazon Linux Local Security Checks	2026/5/27	2026/5/27	high

检测

插件搜索

high

critical

high

critical

critical

critical

critical

high

high

high

high