CVE detail
CVE-2026-44185
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 24.9 · diversity 19.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
11 source links · newest first
- CVE-2026-44185 Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`Microsoft MSRC
Information published.
vendormsrc.microsoft.comJun 11, 2026, 8:02 AM - https://access.redhat.com/errata/RHSA-2026:47046access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 8, 2026, 4:16 PM - https://access.redhat.com/errata/RHSA-2026:42828access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 8, 2026, 4:16 PM - https://access.redhat.com/errata/RHSA-2026:41906access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 8, 2026, 4:16 PM - https://access.redhat.com/errata/RHSA-2026:25042access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 8, 2026, 4:16 PM - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44185.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comJun 8, 2026, 4:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2486397bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 8, 2026, 4:16 PM - https://access.redhat.com/security/cve/CVE-2026-44185access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 8, 2026, 4:16 PM - https://access.redhat.com/errata/RHSA-2026:34109access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 8, 2026, 4:16 PM - http://www.openwall.com/lists/oss-security/2026/06/08/12www.openwall.com
No excerpt available.
Exploitwww.openwall.comJun 8, 2026, 4:16 PM - https://httpd.apache.org/security/vulnerabilities_24.htmlhttpd.apache.org
No excerpt available.
Vendor Advisoryhttpd.apache.orgJun 8, 2026, 4:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2017-7668CVSS 7.5 · High
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input st…
- CVE-2026-62353CVSS 5.4 · Medium
TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backs…
- CVE-2025-47406CVSS 6.1 · Medium
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
- CVE-2025-47403CVSS 6.5 · Medium
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
- CVE-2025-47401CVSS 6.5 · Medium
Transient DOS when processing target power rate tables during channel configuration.
- CVE-2026-0930CVSS 2.3 · Low
Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing…