CVE Listesine Dön
CVE-2026-23918

Vulnerability in Apache HTTP Server

CVSS Skor

8.8

EPSS İhtimal

%49.7

Risk Skoru

4.4

Yayın

5 ay önce

Overview (Genel Bakış)Public Exploits (11)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
gagaltotal/CVE-2026-23918-Double-free-Apache-httpd-mod_http2
GitHub

Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE

Public PoCKaynak güncellemesi: 29.06.2026 08:33:10
G
insomnisec/Detections-CVE-2026-23918
GitHub

Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl

Public PoCKaynak güncellemesi: 24.06.2026 21:02:10
G
aa022/CVE-2026-23918-Passive-Audit
GitHub

Passive HTTP metadata auditor for CVE-2026-23918 exposure triage

Public PoCKaynak güncellemesi: 17.05.2026 15:21:09
G
sibersan/apache_audit_cve-2026-23918
GitHub

Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification + read-only local auditor. No exploits.

Public PoCKaynak güncellemesi: 16.05.2026 09:36:21
G
Bencodin/CVE-2026-23918-poc
GitHub

Bencodin/CVE-2026-23918-poc

Public PoCKaynak güncellemesi: 13.05.2026 08:50:14
G
striga-ai/CVE-2026-23918
GitHub

Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.

Public PoCKaynak güncellemesi: 14.08.2026 01:02:45
G
alt3kx/CVE-2026-23918
GitHub

CVE-2026-23918 Apache mod_http2 Double-Free Detector

Public PoCKaynak güncellemesi: 17.06.2026 21:30:48
G
CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC
GitHub

CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC

Public PoCKaynak güncellemesi: 06.05.2026 18:40:47
G
hackervlogofficial/CVE-2026-23918
GitHub

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety (non-intrusive) and its specific utility for system administrators.

Public PoCKaynak güncellemesi: 20.07.2026 14:33:56
G
xeloxa/CVE-2026-23918-Apache-H2-PoC
GitHub

Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE/vulnerability detection for Apache 2.4.66.

Public PoCKaynak güncellemesi: 27.08.2026 09:27:28
E
Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service
Exploit-DB

Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service

Exploit referansıKaynak güncellemesi: 26.05.2026 00:00:00

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-23918"