Apache HTTP Server 2.4.69 mod_vhost_alias stack overflow (CVE-2026-109163)
CVE-2026-109163 Published on November 11, 2026
Apache HTTP Server: mod_vhost_alias 1 byte stack buffer overwrite (after CVE-2026-63292)
Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292)
This issue affects Apache HTTP Server: 2.4.69.
Timeline
reported
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2026-109163 has been classified to as a Stack Overflow vulnerability or weakness.
Products Associated with CVE-2026-109163
Want to know whenever a new CVE is published for Apache HTTP Server? stack.watch will email you.
Affected Versions
Apache Software Foundation Apache HTTP Server:- Version 2.4.69, <= 2.4.70 is affected.