Live › vulnerability › CVE-2026-114459
Go to dashboardmod_qos, an Apache HTTP Server module, reads memory past the end of a buffer while inspecting HTTP response bodies. A remote unauthenticated attacker can send crafted server responses that crash an Apache worker process, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).
This page as .md · .json · in your agent: get_signal("CVE-2026-114459")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.