Vulnerability Details CVE-2026-56154
Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})
This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 33.7%
CVSS Severity
CVSS v3 Score 9.8