VulnSocial

CVE-2026-34191Disclosure(apache / apr-util)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3

apache CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • apr-util

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
apache
Products
apr-util

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-09: 1Technical Details · 2026-08-09: 108-09
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • connect24h@connect24h
    Disclosure

    うわ、APRで3連発はしんどい。 Apache Portable Runtime Utilityで、apr_dbd_oracleのSQL Injection（CVE-2026-34191）、Redis clientとmemcached clientのheap buffer overflow（CVE-2026-34501、CVE-2026-34502）が公開された。共通部品だけに、アプリ名だけ眺めても拾えないのが嫌らしい。 私の資産台帳も、apr-utilの導入version、runtimeで有効なDBD driver、Redis・memcached clientの利用有無まで持たせることにする。Oracle・Redis・memcachedを使う環境は、直接依存だけでなく間接依存とlinked libraryまで見える状態にしておいた方が良い。 ソース: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34191

    Post summary

    The post announces the publication of three CVEs affecting Apache Portable Runtime, Redis, and memcached, noting SQL injection and heap buffer overflow vulnerabilities without indicating exploitation or patch details.

    01000451
    5.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapacheapr-util---

Explore more

Back to dashboardapache CVEsapr-util vulnerabilities