Apache HTTP Server 2.4.49 Actively exploited
Attackers are using a vulnerability in this version right now. Upgrade immediately.
Upgrade to 2.4.69
Nearest fix in your release line.
- Known vulnerabilities
- 86 (15 critical, 41 high)
- End of life
- No
- Data as of
- 2026-10-24 15:37 UTC
Vulnerabilities
- CVE-2021-42013 critical exploited
- CVE-2024-38475 critical exploited
- CVE-2021-41773 high exploited
- CVE-2026-59797 critical
- CVE-2026-57941 critical
- CVE-2026-56154 critical
- CVE-2026-44631 critical
- CVE-2026-29167 critical
- CVE-2026-28780 critical
- CVE-2024-38476 critical
And 76 more with lower severity.
- 4 Apache HTTP Server vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.