PT-2026-103924

CVE-2026-46729

Published

2026-10-01

Updated

2026-11-10

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.68

Description A NULL pointer dereference exists in the mod heartmonitor module when used over a unicast listener. This issue can lead to a Denial of Service (DoS), which is a condition where the server becomes unavailable to legitimate users.

Recommendations Update Apache HTTP Server to a version later than 2.4.68. As a temporary mitigation, restrict or disable the use of the mod heartmonitor module over unicast listeners.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors