CVE-2026-34059

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.67

Description A buffer over-read issue exists in the mod proxy ajp module, specifically within the ajp parse data() function. This flaw can lead to a heap over-read and memory disclosure, potentially exposing sensitive memory data. A buffer over-read occurs when a program reads more data from a buffer than it is intended to, which can lead to the leakage of adjacent memory contents.

Recommendations Upgrade to version 2.4.67. Limit exposure and monitor for abnormal requests.