Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-09 | 2 | Active Exploitation1Patch1 |
| 2026-06-11 | 1 | Disclosure1 |
| 2026-07-02 | 1 | Patch1 |
| 2026-07-13 | 1 | Patch1 |
| 2026-07-20 | 1 | Disclosure1 |
Critical 9.8 in Apache HTTP Server: CVE-2026-29167 is a use-after-free in mod_ldap (per-dir config), affecting all 2.4.x through 2.4.67. No auth, no interaction needed. Upgrade now. #Apache #infosec https://secalerts.co/vulnerability/CVE-2026-29167
Post summary
The tweet announces a high‑severity use‑after‑free vulnerability in Apache HTTP Server (CVE‑2026‑29167) and urges users to upgrade immediately to mitigate the risk.
8 Apache HTTP Server CVEs patched in Debian 13.6 🚨 🔵 CVE-2026-29167 – mod_ldap UAF (CVSS ~9.8) 🔵 CVE-2026-48913 – mod_http2 UAF (7.3) 🔵 CVE-2026-34355/34356/42536 – buffer overflows 🔵 CVE-2026-29170 – mod_proxy_ftp XSS 🔵 CVE-2026-49975/44186 – DoS Upgrade to httpd 2.4.68 ⬆️
Post summary
The announcement reports that eight Apache HTTP Server CVEs are now patched in Debian 13.6, providing upgrade guidance and detailing the type and severity of each vulnerability.
Top #CVE to #patch this week 👀 - @Ubiquiti UniFi OS (CVE-2026-34908, 34909, 34910) critical flaws - @Cisco UCM (CVE-2026-20230) SSRF to root - Another two @Linux Privesc pedit COW(CVE-2026-46331), DirtyClone - @Linux kernel — new DirtyFrag family privesc, JFrog published exploit - @apache_httpd Server (CVE-2026-44631, CVE-2026-29167) - @splunk Enterprise (CVE-2026-20253) missing auth - @nginx Plus (CVE-2026-42055) - @squidproxy (CVE-2026-47729) Squidbleed, a 29-year-old memory leak found by Mythos. Update to v7.6
Post summary
The tweet lists multiple high‑severity CVEs, urges immediate patching (including a specific update for squidproxy), notes a published exploit for one vulnerability, but does not report active exploitation or false positives.
🚨 Critical - Apache HTTP Server Use-After-Free (CVE-2026-29167) A severe Use-After-Free vulnerability (CVSS 9.8) has been disclosed in Apache HTTP Server when utilizing mod_ldap in a per-directory configuration. Unauthenticated network attackers can exploit this memory corruption flaw, potentially leading to a complete system compromise. 👉 Impacted: Apache HTTP Server versions 2.4.0 through 2.4.67 | Upgrade to version 2.4.68 to mitigate the risk
Post summary
A critical use‑after‑free vulnerability (CVE‑2026‑29167) in Apache HTTP Server’s mod_ldap has been disclosed, with a high CVSS score and a recommendation to upgrade to version 2.4.68 for remediation.
⚠️ NetApp ONTAP 9 alert: CVE-2026-29167 (CVSS 9.8) Attackers could disrupt service or cause a denial of service. No workaround; upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/netapp-ntap-20260610-0001 #NetApp #ONTAP9 #CyberSecurity #CVE
Post summary
The tweet discloses CVE‑2026‑29167, a high‑severity denial‑of‑service flaw in NetApp ONTAP 9, recommends patching via a vendor‑listed fixed release, and provides minimal extra context.
Attention, elevated activities detected targeting Apache HTTP Server (CVE-2026-29167) https://vuldb.com/vuln/369198/cti
Post summary
The message alerts to elevated activity targeting Apache HTTP Server via CVE‑2026‑29167, indicating that the vulnerability is being actively exploited.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | http_server | - | - | - |