The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41906 advisory.

    * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)

    * Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file     manipulation (CVE-2026-24072)

    * httpd: mod_auth_digest: timing attack allows a bypass of digest authentication (CVE-2026-33006)

    * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)

    * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)

    * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server     (CVE-2026-44185)

    * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)

    * httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server     (CVE-2026-44186)

    * httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue (CVE-2026-42535)

    * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc     (CVE-2026-42536)

    * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)

    * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951)

    * httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges     (CVE-2026-44119)

    Bug Fix(es) and Enhancement(s):

    * address Moderate severity issues from httpd 2.4.68 [rhel-9.8.z] (JIRA:Rocky Linux-184520)

    * mod_proxy_html regression in CVE-2026-34355 fix [rhel-9.8.z] (JIRA:Rocky Linux-192752)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1778614426 advisory.

  - An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess     authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version     2.4.67, which fixes this issue. (CVE-2026-24072)

  - Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects     to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause     it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache     HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
    (CVE-2026-28780)

  - A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker     to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.
    The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version     1.2.0. Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.
    (CVE-2026-29169)

  - A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest     authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this     issue. (CVE-2026-33006)

  - A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an     unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are     recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-33007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1778174697 advisory.

  - An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess     authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version     2.4.67, which fixes this issue. (CVE-2026-24072)

  - Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects     to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause     it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache     HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
    (CVE-2026-28780)

  - A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker     to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.
    The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version     1.2.0. Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.
    (CVE-2026-29169)

  - A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest     authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this     issue. (CVE-2026-33006)

  - A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an     unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are     recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-33007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1778111838 advisory.

  - An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess     authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version     2.4.67, which fixes this issue. (CVE-2026-24072)

  - Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects     to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause     it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache     HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
    (CVE-2026-28780)

  - A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker     to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.
    The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version     1.2.0. Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.
    (CVE-2026-29169)

  - A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest     authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this     issue. (CVE-2026-33006)

  - A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an     unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are     recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-33007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the httpd package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2103-1 advisory.

    This update for apache2 fixes the following issues

    - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).
    - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).
    - CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).
    - CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).
    - CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests     (bsc#1263956).
    - CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).
    - CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to     crash a child       processes (bsc#1263954).
    - CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).
    - CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).
    - CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check     (bsc#1263951).
    - CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2641-1 advisory.

    This update for apache2 fixes the following issues

    Update to 2.4.66 (jsc#PED-16334):

    Security issues:

    - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).
    - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).
    - CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).
    - CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).
    - CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests     (bsc#1263956).
    - CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).
    - CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to     crash a child       processes (bsc#1263954).
    - CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).
    - CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).
    - CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check     (bsc#1263951).
    - CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).

    Non security issue:

    - Internal server error on very long URL (bsc#690734).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98130 advisory.

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

    Security Fix(es):

    * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)

    * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)

    * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)

    * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server     (CVE-2026-44185)

    * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)

    * httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server     (CVE-2026-44186)

    * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc     (CVE-2026-42536)

    * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)

    * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
329047	RockyLinux 9 : httpd (RLSA-2026:41906)	Nessus	Rocky Linux Local Security Checks	2026/7/22	2026/7/23	critical
351894	CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1778614426)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	high
360128	CentOS Linux 8 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1778174697)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	high
361832	CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1778111838)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	high
314595	Photon OS 4.0: Httpd PHSA-2026-4.0-1014	Nessus	PhotonOS Local Security Checks	2026/5/14	2026/11/2	high
317656	SUSE SLES15 Security Update : apache2 (SUSE-SU-2026:2103-1)	Nessus	SuSE Local Security Checks	2026/5/29	2026/9/29	high
323050	SUSE SLES12: apache2 / apache2-devel / apache2-doc / apache2-example-pages / etc (SUSE-SU-2026:2641-1)	Nessus	SuSE Local Security Checks	2026/6/26	2026/8/29	high
378728	RHEL 8 : httpd:2.4 (RHSA-2026:98130)	Nessus	Red Hat Local Security Checks	2026/11/11	2026/11/11	critical

检测

插件搜索

critical

high

high

high

high

high

high

critical