Apache HTTP Server is a flexible, module-rich web server that serves dynamic and static content with fine-grained configuration and broad platform support. What is Apache? The venerable Apache HTTP ...

A vulnerability at the very heart of how the modern Internet operates is disproportionately affecting organizations that have large, distributed footprints on the Web. Patches are available, but some ...

The Apache Software Foundation released HTTP Server version 2.4.68 on June 8, 2026, addressing 12 security vulnerabilities spanning low to moderate-severity ratings. The update covers a wide range of ...

A new denial-of-service (DoS) attack dubbed HTTP/2 Bomb can be launched from a single machine to take down web servers within seconds. The technique works on default HTTP/2 configurations of major web ...

A newly disclosed remote denial-of-service exploit dubbed “HTTP/2 Bomb” targets major web servers in their default configurations nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora.

Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora. The ...

A newly disclosed remote denial-of-service exploit dubbed “HTTP/2 Bomb” targets the default HTTP/2 configurations of the world’s most widely deployed web servers, nginx, Apache httpd, Microsoft IIS, ...

Apache fixed several flaws in HTTP Server, including CVE-2026-23918 (CVSS score of 8.8), a double-free bug in HTTP/2 that could allow remote code execution. The Apache Software Foundation has released ...

The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including a severe vulnerability that could potentially lead to ...

A web server is a fundamental element of the internet. Apache works by establishing a connection between a remote server and the browsers of website visitors as they communicate with each other.

A recent research presentation at Black Hat USA 2024 revealed architectural vulnerabilities within the Apache HTTP Server, a widely used web server software. The research highlights several technical ...