CVE-2026-34032

score

<0.1

cvss

5.3

epss

0.9%

published

2026-05-04

kev added

—

first seen

2026-10-21

Apache HTTP Server <= 2.4.66 contains an out-of-bounds read caused by improper null termination, letting attackers potentially cause denial of service or information disclosure, exploit requires crafted requests.