CVE-2026-56153
Received Received - Intake

Out-of-bounds Write in Apache HTTP Server mod_charset_lite

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: Apache Software Foundation

Description
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-01
Last Modified
2026-10-01
Generated
2026-10-01
AI Q&A
2026-10-01
EPSS Evaluated
N/A
NVD
CVE-2026-56153
EUVD
EUVD-2026-90893

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
apache http_server From 2.4.0 (inc) to 2.4.68 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite module. It allows an attacker to write data outside the intended memory buffer, potentially leading to crashes or arbitrary code execution.

Detection Guidance

To detect this vulnerability, check the Apache HTTP Server version running on your system. If it is between 2.4.0 and 2.4.68, it is affected. Use commands like 'apache2 -v' or 'httpd -v' to check the version.

Impact Analysis

If exploited, this vulnerability could allow attackers to execute arbitrary code on the server, leading to unauthorized access, data theft, or denial of service. Systems running affected Apache versions are at risk.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is an out-of-bounds write issue in Apache HTTP Server's mod_charset_lite that could lead to data corruption or crashes but does not inherently violate regulatory requirements.

Mitigation Strategies

Immediately upgrade Apache HTTP Server to a version beyond 2.4.68. Disable the mod_charset_lite module if not required. Monitor Apache logs for unusual activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56153. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart