CVE-2026-56154

Опубликовано: 01 окт. 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Ссылки

https://httpd.apache.org/security/vulnerabilities_24.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/10/01/17
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.4.0 (включая) до 2.4.69 (исключая)

EPSS

Процентиль: 45%

0.00536

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-56154

CVSS3: 9.8

ubuntu

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 8.1

redhat

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 9.8

msrc

18 дней назад

Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

CVE-2026-56154

CVSS3: 9.8

debian

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when ...

GHSA-f5cw-5j88-wxxc

CVSS3: 9.8

github

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

EPSS

Процентиль: 45%

0.00536

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416