CVE-2026-43951: Apache HTTP Server

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Affected products

• Apache HTTP Server: from 2.4.0, up to and including 2.4.67

Published 2026-06-08. Last modified 2026-07-23.