CVE-2026-46729

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.68

Description A NULL pointer dereference exists in the mod heartmonitor module when used over a unicast listener. This issue can lead to a Denial of Service (DoS), which is a condition where the server becomes unavailable to legitimate users.

Recommendations Update Apache HTTP Server to a version later than 2.4.68. As a temporary mitigation, restrict or disable the use of the mod heartmonitor module over unicast listeners.