CVE-2026-43951

score

<0.1

cvss

6.5

epss

1.0%

published

2026-06-08

kev added

—

first seen

2026-10-21

Apache HTTP Server 2.4.0 through 2.4.67 contains an out-of-bounds read caused by mod_headers, mod_mime, and multiple response languages, letting attackers read memory outside intended bounds, exploit requires crafted request.