Apache
CVE-2026-109163: Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292) This issue affects Apache HTTP Server: 2.4.69.
CVE-2026-109163 Nov 11, 2026 Source: Vendor
Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292)
This issue affects Apache HTTP Server: 2.4.69.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-109163
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2026-109163
BR2026-0000-047150
unclaimed
Credited as Gustavo Aiello
CVE-2026-109163
BR2026-0000-047151
unclaimed
Credited as Charles Vosburgh (the-vibe-dev)
CVE-2026-109163
BR2026-0000-047152
unclaimed
Credited as Wojciech Tatarski (CloudLinux / TuxCare)
CVE-2026-109163
BR2026-0000-047153
unclaimed
Credited as Oz Kaiser
CVE-2026-109163
BR2026-0000-047154
unclaimed
Credited as Daisuke Hatakeyama (SYZD Research)