LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

Apache CVEs

Every Apache vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

3Tracked CVEs 1Known exploited 0Critical 9.0+ 1Covered this week

All Known exploited Critical High This week

3 CVEs EPSSCoverage

8.1CVSS 3.1 CVE-2026-119618 Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers Apache · HTTP Server EPSS 0.41% 1 story 2 days ago 7.5CVSS 3.1 CVE-2026-29146 Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default Apache · Tomcat EPSS 8.9% 1 story 3 months ago 7.5CVSS 3.1 CVE-2026-34486 Exploited Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Apache · Tomcat EPSS 99% 1 story 3 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.