News
ai OpenCode breach exposes stored OpenAI and Anthropic keys, prompts urgent key rotation - Startup Fortune - Anthropic - Claude AI cybersecurity Microsoft 365: let an app send mail from chosen mailboxes only - Pro CISO cybersecurity Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack - BleepingComputer cybersecurity Drupal patches critical RCE flaws, warns exploits may emerge soon - BleepingComputer threat-intel Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups - GBHackers cybersecurity ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down - CyberPress cybersecurity Encryption Is Getting Squeezed From All Sides - Wired Security cybersecurity MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon - The Hacker News cybersecurity Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel - SecurityWeek threat-intel Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years - GBHackers threat-intel Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication - GBHackers threat-intel OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root - GBHackers threat-intel GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories - GBHackers threat-intel SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data - GBHackers cybersecurity Anthropic’s Claude AI Solves 25-Year-Old NSA Cryptography Mystery in Under 30 Minutes - CyberPress
1 / 15
All news ›
Vulnerability

USN-8931-1: Apache HTTP Server vulnerabilities

Ubuntu Security Notices ·

이지웅 discovered that Apache HTTP Server exposed WebDAV property information. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-58415) Zhen Kong and Charles Vosburgh discovered that Apache HTTP Server did not properly validate FTP server responses. A remote attacker could possibly use this issue to make a forward proxy connect to an arbitrary host. (CVE-2026-63045) Hyojae Lee and Zhen Kong discovered that Apache HTTP Server incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-63292) Lucian Nitescu and Zhen Kong discovered that Apache HTTP Server did not properly handle certain responses from backend servers. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-63686) Qing Xu discovered that Apache HTTP Server incorrectly interpreted HTTP responses from backend servers. A remote attacker could possibly use this

Continue on Ubuntu Security Notices ↗ ‹ All news Get the newsletter