CVE-2026-109163 | Apache HTTP Server up to 2.4.70 mod_vhost_alias buffer overflow

November 11, 2026 Yanac

A vulnerability, which was classified as critical, was found in Apache HTTP Server up to 2.4.70. Impacted is an unknown function of the component mod_vhost_alias. Such manipulation leads to buffer overflow.

This vulnerability is documented as CVE-2026-109163. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More