CISA announced 7 CVE's for Apache today (2026-06-08) that affect version of Apache up to 2.4.67.
The Apache Project just release today also, version 2.4.68 which fixes the CVE's.
If you are running Apache under 2.4.68, you can find the 2 KB articles on how to update Apache under CWP at:
Non-HTTP/2:
https://starburst.help/control-web-pane ... linux-8-9/
With HTTP/2:
https://starburst.help/control-web-pane ... linux-8-9/
Fixes for multiple Apache CVEs
-
Starburst-David
- Posts: 398
- Joined: Wed Feb 11, 2026 8:31 pm
-
overseer
- Posts: 29
- Joined: Thu Feb 12, 2026 3:04 pm
Re: Fixes for multiple Apache CVEs
Are you running HTTP/2 on your servers (for performance)?
-
Starburst-David
- Posts: 398
- Joined: Wed Feb 11, 2026 8:31 pm