UBUNTU-CVE-2026-46729: Null Pointer Dereference

Published Oct 1, 2026

Updated

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Affected Software

8 affected components

ubuntu/apache2*

Event History

Oct 1, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed?

Ubuntu systems using apache2 with Apache HTTP Server versions from 2.4.0 through 2.4.68 are affected when mod_heartmonitor is used over a unicast listener.

Does exploitation require authentication or user interaction?

No. The supplied vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.

What is the expected impact of successful exploitation?

The vulnerability is rated high severity with an availability impact of high. The supplied vector indicates no confidentiality or integrity impact.

UBUNTU-CVE-2026-46729: Null Pointer Dereference

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed?

Does exploitation require authentication or user interaction?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

Does exploitation require authentication or user interaction?

What is the expected impact of successful exploitation?