Is CVE-2026-56449 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56449?

CVE-2026-56449 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-56449

Description

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.