CVE-2026-43951

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in Apache HTTP Server

Publication date: 2026-06-08

Last updated on: 2026-06-11

Assigner: Apache Software Foundation

Description

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-08

Last Modified

2026-06-11

Generated

2026-06-29

AI Q&A

2026-06-08

EPSS Evaluated

2026-06-27

NVD

CVE-2026-43951

EUVD

EUVD-2026-35093

Affected Vendors & Products

Vendor	Product	Version / Range
apache	http_server	From 2.4.0 (inc) to 2.4.67 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an Out-of-bounds Read issue in the Apache HTTP Server. It occurs specifically when using the mod_headers and mod_mime modules along with multiple response languages.

An Out-of-bounds Read means that the server reads data outside the intended memory boundaries, which can lead to unexpected behavior or information disclosure.

Impact Analysis

Exploitation of this vulnerability could allow an attacker to read memory outside the intended buffer, potentially exposing sensitive information or causing the server to behave unpredictably.

This could lead to information disclosure or denial of service, depending on how the out-of-bounds read is leveraged.

Mitigation Strategies

To mitigate this vulnerability, you should upgrade your Apache HTTP Server to version 2.4.68 or later, where the issue has been fixed.

Additionally, if upgrading immediately is not possible, consider disabling the mod_headers and mod_mime modules or avoid using multiple response languages until the update can be applied.

Hi! I’m here to help you understand CVE-2026-43951. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70