{"id":"CVE-2026-114459","kind":"vulnerability","aliases":["CVE-2026-114459"],"related":[],"title":"mod_qos: out-of-bounds read in response inspection lets remote crash Apache workers","description":"A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).","summary":"mod_qos, an Apache HTTP Server module, reads memory past the end of a buffer while inspecting HTTP response bodies. A remote unauthenticated attacker can send crafted server responses that crash an Apache worker process, causing denial of service.","severity":"low","cvss":3.7,"epss":0.0028,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apache","mod_qos","runtime"],"not_affected_if":[],"how_to_check":"- unknown","fix":null,"status":"open","published_at":"2026-10-22T07:16:42+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","triaged_at":"2026-10-25T04:43:21+00:00","updated_at":"2026-10-25T04:43:21+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-25T04:43:21Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"mod_qos: out-of-bounds read in response inspection lets remote crash Apache workers","impact":"low","summary":"mod_qos, an Apache HTTP Server module, reads memory past the end of a buffer while inspecting HTTP response bodies. A remote unauthenticated attacker can send crafted server responses that crash an Apache worker process, causing denial of service.","category":"runtime","nicknames":[],"who_cares":["apache","mod_qos"],"confidence":0.5,"needs_auth":"no","worst_case":"Apache worker processes crash, causing denial of service","analyst_note":"Find the affected mod_qos versions and fixed release from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-114459) and confirm whether the module's response-body inspection is on by default.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000525,"input_tokens":3352,"output_tokens":379,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-114459':18A,21A '-2026':17A,20A 'alloc':88C 'apach':14A,22B,29B,58B,107C 'attack':49B,94C 'bodi':45B,76C 'bound':6A 'boundari':78C,90C 'buffer':40B,89C 'caus':61B,81C,105C 'check':79C 'craft':52B,102C 'crash':13A,56B,111C 'cve':16A,19A 'denial':62B,116C 'dos':119C 'end':37B 'exploit':96C 'flaw':66C 'found':68C 'http':30B,43B,74C 'improp':77C 'inspect':10A,42B,73C 'let':11A 'memori':34B,86C 'mod':1A,23B,26B,70C 'modul':32B,83C 'out-of-bound':3A 'outsid':87C 'past':35B 'process':60B,109C 'qos':2A,24B,27B,71C 'read':7A,33B,85C 'remot':12A,47B,93C 'respons':9A,44B,54B,75C,104C 'result':113C 'runtim':25B 'send':51B 'server':31B,53B,103C 'servic':64B,118C 'specif':101C 'trigger':100C 'unauthent':48B,92C 'vulner':98C 'worker':15A,59B,108C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T07:16:42+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss_by":"patrick@puiterwijk.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114459","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114459","severity":null,"published_at":"2026-10-22T07:16:42+00:00","modified_at":"2026-10-22T17:21:57+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114459","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114459","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}