Apache HTTP Server: versions, end of support and vulnerabilities
Release branches of Apache HTTP Server with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 371 vulnerabilities for Apache HTTP Server, 5 of them actively exploited. Last checked on 02/11/2026.
Release branches
Apache HTTP Server 2.4
Latest version: 2.4.69, released on 01/10/2026
End of support: no date known
No known vulnerability open in 2.4.69
Apache HTTP Server 2.2
Latest version: 2.2.34, released on 11/07/2017
End of support: 11/07/2017
36 known vulnerabilities open in 2.2.34
Apache HTTP Server 2.0
Latest version: 2.0.65, released on 09/07/2013
End of support: 10/07/2013
40 known vulnerabilities open in 2.0.65
Apache HTTP Server 1.3
Latest version: 1.3.42, released on 02/02/2010
End of support: 03/02/2010
45 known vulnerabilities open in 1.3.42
Most recent vulnerabilities of Apache HTTP Server
- CVE-2026-93546, CVSS 3.1: 8.8, 01/10/2026
- CVE-2026-79768, CVSS 3.1: 5.3, 01/10/2026
- CVE-2026-73637, CVSS 3.1: 7.3, 01/10/2026
- CVE-2026-73636, CVSS 3.1: 8.1, 01/10/2026
- CVE-2026-63718, CVSS 3.1: 7.5, 01/10/2026
- CVE-2026-63686, CVSS 3.1: 7.5, 01/10/2026
- CVE-2026-63292, CVSS 3.1: 7.5, 01/10/2026
- CVE-2026-63045, CVSS 3.1: 7.5, 01/10/2026
- CVE-2026-59797, CVSS 3.1: 9.8, 01/10/2026
- CVE-2026-59685, CVSS 3.1: 7.5, 01/10/2026
Get notified
Add Apache HTTP Server with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Apache HTTP Server