Severity: low Affected versions:
- Apache HTTP Server 2.4.69 through 2.4.70 Description: Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292) This issue affects Apache HTTP Server: 2.4.69. Credit: Gustavo Aiello (finder) Charles Vosburgh (the-vibe-dev) (finder) Wojciech Tatarski (CloudLinux / TuxCare) (finder) Oz Kaiser (@tatikoma) (finder) Daisuke Hatakeyama (SYZD Research) (finder) References: https://httpd.apache.org/security/vulnerabilities_24.html https://httpd.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-109163 Timeline: 2026-10-05: reported
