{"product":"apache-httpd","productName":"Apache HTTP Server","version":"2.0.65","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2013-07-10","cycle":"2.0"},"counts":{"critical":3,"high":7,"medium":6,"low":1,"unknown":7},"vulnerabilities":[{"id":"CVE-2026-28780","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2026-42535","severity":"critical","score":9.1,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2022-28615","severity":"critical","score":9.1,"kev":false,"advisoryUrl":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/"},{"id":"CVE-2026-93546","severity":"high","score":8.8,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2026-24072","severity":"high","score":8.8,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2025-58098","severity":"high","score":8.3,"kev":false,"fixedIn":"2.4.66","advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2026-34059","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2026-29169","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2025-49812","severity":"high","score":7.4,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"id":"CVE-2023-38709","severity":"high","score":7.3,"kev":false,"advisoryUrl":"https://httpd.apache.org/security/vulnerabilities_24.html"}],"moreVulnerabilities":14,"upgrade":{"recommended":"2.4.69"},"notes":["4 Apache HTTP Server vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T20:37:49.032Z"}