Page 1 of 1

Fixes for multiple Apache CVEs

Posted: Mon Jun 08, 2026 7:08 pm
by Starburst-David
CISA announced 7 CVE's for Apache today (2026-06-08) that affect version of Apache up to 2.4.67.

The Apache Project just release today also, version 2.4.68 which fixes the CVE's.

If you are running Apache under 2.4.68, you can find the 2 KB articles on how to update Apache under CWP at:

Non-HTTP/2:
https://starburst.help/control-web-pane ... linux-8-9/

With HTTP/2:
https://starburst.help/control-web-pane ... linux-8-9/

Re: Fixes for multiple Apache CVEs

Posted: Fri Jun 19, 2026 1:48 pm
by overseer
Are you running HTTP/2 on your servers (for performance)?

Re: Fixes for multiple Apache CVEs

Posted: Fri Jun 19, 2026 8:35 pm
by Starburst-David
Yes