CVE-2026-48913

CVSS Score & Metrics

Base Score

7.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L                                    

Vulnerability Description

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.

This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

Vulnerability Details

Published Date

June 08, 2026

Last Modified

June 10, 2026

CWE ID

CWE-416

Source

NVD

Vendor

Apache Software Foundation

Product

Apache HTTP Server

External References

https://httpd.apache.org/security/vulnerabilities_24.html

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment