Vulnerability in Apache HTTP Server
CVSS score
8.8
EPSS probability
%49.7
Risk score
4.4
Published
5 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service
Passive HTTP metadata auditor for CVE-2026-23918 exposure triage
CVE-2026-23918 Apache mod_http2 Double-Free Detector
CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC
Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE
This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety (non-intrusive) and its specific utility for system administrators.
Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl
Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification + read-only local auditor. No exploits.
Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.
Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE/vulnerability detection for Apache 2.4.66.
Similar Vulnerabilities
Improper input validation in Apache Log4j
struts2: RCE when performing file upload based on Jakarta Multipart parser
struts2: Using specific results and namespaces can result in a remote code execution
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
Vulnerability in Apache Tomcat
Code injection in Spring By Pivotal Spring Framework
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-23918"