Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

The version of Apache httpd installed on the remote host is prior to 2.4.69. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.69 advisory.

  - Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-     related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. (CVE-2026-59797)

  - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal     redirects from CGI programs to also be treated as CGI and executed. The target must already be in a     directory enabled for CGI and have no other extension understood by mod_mime. This issue affects Apache     HTTP Server: from 2.4.60 through 2.4.68. (CVE-2026-42356)

  - A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission     to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version     2.4.69, which fixes this issue (CVE-2026-42528)

  - NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This     issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. (CVE-2026-46729)

  - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's     mod_session_cookie module. When SessionCookieRemove changes across internal redirects, the session cookie     may still be passed to a backend server. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
    (CVE-2026-47360)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ed670f20-bdc3-11f1-a6ea-8447094a420f advisory.

    The Apache httpd project reports:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
362655	Apache 2.4.x < 2.4.69 Multiple Vulnerabilities	Nessus	Web Servers	Combined	critical
362474	FreeBSD : Apache httpd -- Multiple vulnerabilities (ed670f20-bdc3-11f1-a6ea-8447094a420f)	Nessus	FreeBSD Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-59685

high

Tenable Plugins

critical

critical