CVE-2026-46729
Apache HTTP Server: mod_heartmonitor denial of service
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
| CWE | CWE-476 |
| Vendor | apache software foundation |
| Product | apache http server |
| Published | Oct 1, 2026 |
| Last Updated | Oct 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for apache software foundation apache http server
Be the first to know when new high vulnerabilities affecting apache software foundation apache http server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apache Software Foundation / Apache HTTP Server
2.4.0 ≤ 2.4.68
References
Credits
Zhang San Ankit Prateek (OffByQuant) Zhen Kong SeungHyun Cho of KISA 4ra1n, pyn3rd and unam4 Ryoma Nishioka Keita Sode