Buffer Over-read Vulnerability in Apache HTTP Server by Apache
CVE-2026-34059

Currently unrated

Key Information:

Vendor: Apache
Status: Apache Http Server
Vendor: CVE Published:; 4 May 2026

What is CVE-2026-34059?

A buffer over-read vulnerability in Apache HTTP Server can lead to exposure of memory contents, which may divulge sensitive information. This issue affects all versions prior to 2.4.67. It is crucial for users to upgrade to the patched version to mitigate potential risks to their web server integrity and protect against unauthorized data exposure.

Affected Version(s)

Apache HTTP Server 0 <= 2.4.66

References

https://httpd.apache.org/security/vulnerabilities_24.html

vendor-advisory

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 4, 2026
Vulnerability Reserved
Mar 25, 2026

Credit

Elhanan Haenel

CVE-2026-34059 Data

JSON