CVE-2026-44185: Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Overview

Severity

High (CVSS 7.3)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploit Status

Not Exploited

Patch Tuesday

2026-Jun

Released

2026-06-11

Last Updated

2026-06-23

EPSS Score

0.69% (percentile: 49.2%)

Affected Products (1)

Open Source Software

• azl3 httpd 2.4.67-1 on Azure Linux 3.0

Revision History

• 2026-06-11: Information published.
• 2026-06-23: Information published.