Apache HTTP Server
http_servercounted 2026-10-08 03:20 UTC
As of 2026-10-08, 293 106 hosts ran Apache HTTP Server with at least one known CVE on a service open at their latest check, across 149 versions with CVEs; 329 distinct CVEs.
Known CVEs on hosts running it
293 106hosts with known CVEs
329distinct CVEs
149versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 15 775 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 2.4.58 | 84 870 | 66 |
| 2.4.52 | 60 752 | 82 |
| 2.4.6 | 33 650 | 119 |
| 2.2.15 | 12 063 | 73 |
| 2.0.54 | 6 811 | 78 |
| 2.4.62 | 6 539 | 56 |
| 2.4.66 | 6 338 | 44 |
| 2.4.37 | 5 813 | 113 |
| 2.4.65 | 5 142 | 48 |
| 2.4.57 | 4 758 | 69 |
| 2.4.67 | 4 497 | 33 |
| 2.4.54 | 4 160 | 71 |
| 2.4.46 | 3 888 | 96 |
| 2.4.41 | 3 662 | 101 |
| 2.4.63 | 3 504 | 56 |
| 2.4.39 | 3 330 | 105 |
| 2.4.68 | 2 777 | 20 |
| 2.2.3 | 2 775 | 106 |
| 2.4.10 | 2 299 | 115 |
| 2.4.59 | 1 919 | 63 |
| 2.4.38 | 1 682 | 111 |
| 2.4.48 | 1 659 | 89 |
| 2.4.29 | 1 628 | 112 |
| 2.4.51 | 1 616 | 84 |
| 2.4.23 | 1 616 | 123 |
| 2.4.43 | 1 594 | 99 |
| 2.4.25 | 1 546 | 118 |
| 2.4.56 | 1 463 | 69 |
| 2.2.22 | 1 243 | 57 |
| 2.2.9 | 1 227 | 86 |
| 2.4.53 | 1 159 | 79 |
| 2.4.55 | 1 112 | 71 |
| 2.2.13 | 1 075 | 81 |
| 2.4.18 | 969 | 120 |
| 2.4.64 | 774 | 49 |
| 2.4.33 | 640 | 113 |
| 2.2.34 | 608 | 36 |
| 2.4.34 | 580 | 112 |
| 2.2.24 | 568 | 52 |
| 2.4.9 | 555 | 118 |
| 2.4.27 | 546 | 113 |
| 2.2.31 | 515 | 43 |
| 2.4.7 | 476 | 120 |
| 2.2.25 | 414 | 50 |
| 2.2.14 | 389 | 78 |
| 2.4.16 | 373 | 108 |
| 2.0.46 | 364 | 97 |
| 2.4.17 | 355 | 117 |
| 2.4.12 | 338 | 112 |
| 2.2.17 | 317 | 65 |
99 more versions
| 2.2.16 | 313 hosts |
| 2.2.11 | 297 hosts |
| 1.3.31 | 297 hosts |
| 2.2.21 | 290 hosts |
| 2.2.29 | 264 hosts |
| 1.4.0 | 253 hosts |
| 2.4.35 | 246 hosts |
| 2.4.61 | 238 hosts |
| 2.2.8 | 225 hosts |
| 1.3.41 | 221 hosts |
| 0.6.5 | 212 hosts |
| 1.3.33 | 194 hosts |
| 2.4.3 | 190 hosts |
| 2.4.4 | 181 hosts |
| 1.3.42 | 171 hosts |
| 2.4.20 | 150 hosts |
| 1.3.29 | 149 hosts |
| 2.2.23 | 148 hosts |
| 2.4.2 | 145 hosts |
| 1.3.37 | 145 hosts |
| 2.2.27 | 145 hosts |
| 2.2.4 | 145 hosts |
| 2.4.28 | 143 hosts |
| 2.2.32 | 132 hosts |
| 2.2.20 | 131 hosts |
| 2.4.26 | 128 hosts |
| 2.2.6 | 123 hosts |
| 2.0.64 | 121 hosts |
| 2.4.47 | 110 hosts |
| 1.3.34 | 99 hosts |
| 2.0.63 | 96 hosts |
| 1.3.27 | 93 hosts |
| 2.2.19 | 82 hosts |
| 2.2.26 | 80 hosts |
| 1.3.39 | 69 hosts |
| 2.4.49 | 66 hosts |
| 1.3.26 | 65 hosts |
| 2.0.59 | 54 hosts |
| 1.3.23 | 49 hosts |
| 2.0.52 | 41 hosts |
| 1.2.6 | 34 hosts |
| 2.4.50 | 33 hosts |
| 1.3.28 | 29 hosts |
| 2.0.47 | 29 hosts |
| 2.2.18 | 29 hosts |
| 2.2.2 | 29 hosts |
| 2.2.10 | 28 hosts |
| 1.3.20 | 25 hosts |
| 2.4.60 | 25 hosts |
| 1.3.19 | 23 hosts |
| 1.3.11 | 21 hosts |
| 1.3.42p2 | 20 hosts |
| 1.3.24 | 19 hosts |
| 2.4.1 | 19 hosts |
| 2.0.55 | 18 hosts |
| 2.0.61 | 18 hosts |
| 2.4.32 | 16 hosts |
| 2.0.48 | 14 hosts |
| 2.0.65 | 14 hosts |
| 2.2.12 | 13 hosts |
| 2.0.51 | 13 hosts |
| 2.0.53 | 12 hosts |
| 1.3.12 | 11 hosts |
| 2.0.58 | 11 hosts |
| 2.2.0 | 10 hosts |
| 1.3.22 | 10 hosts |
| 2.0.49 | 8 hosts |
| 1.1.3 | 6 hosts |
| 1.3.36 | 6 hosts |
| 1.3.9 | 4 hosts |
| 2.0.40 | 3 hosts |
| 1.2.6k | 3 hosts |
| 2.0.39 | 3 hosts |
| 2.0.43 | 3 hosts |
| 2.0.50 | 3 hosts |
| 1.2.2 | 2 hosts |
| 1.2.42 | 2 hosts |
| 1.3.17 | 2 hosts |
| 1.3.3 | 2 hosts |
| 1.4.75beta | 2 hosts |
| 1.9.2 | 2 hosts |
| 2.3.8 | 2 hosts |
| 2.4.59.1 | 2 hosts |
| 1.3.6 | 1 hosts |
| 0.0.0 | 1 hosts |
| 0.14.1-atlassian-01 | 1 hosts |
| 1.0.0 | 1 hosts |
| 1.12.2 | 1 hosts |
| 1.2.4 | 1 hosts |
| 1.3.0 | 1 hosts |
| 1.3.32 | 1 hosts |
| 1.3.35 | 1 hosts |
| 2.0.45 | 1 hosts |
| 2.2.17-dev | 1 hosts |
| 2.3.0 | 1 hosts |
| 2.3.16 | 1 hosts |
| 2.4.14 | 1 hosts |
| 2.4.39.1 | 1 hosts |
| 2.4.42 | 1 hosts |
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2026-93546 HIGH 8.8 | 276 194 |
| CVE-2026-56154 CRITICAL 9.8 | 244 754 |
| CVE-2026-57941 CRITICAL 9.8 | 244 754 |
| CVE-2026-59797 CRITICAL 9.8 | 244 754 |
| CVE-2026-73636 HIGH 8.1 | 244 754 |
| CVE-2026-48005 HIGH 7.5 | 244 754 |
| CVE-2026-56153 HIGH 7.5 | 244 754 |
| CVE-2026-56449 HIGH 7.5 | 244 754 |
| CVE-2026-59685 HIGH 7.5 | 244 754 |
| CVE-2026-63045 HIGH 7.5 | 244 754 |
| CVE-2026-63292 HIGH 7.5 | 244 754 |
| CVE-2026-63686 HIGH 7.5 | 244 754 |
| CVE-2026-73637 HIGH 7.3 | 244 754 |
| CVE-2026-58415 MEDIUM 5.3 | 244 754 |
| CVE-2026-79768 MEDIUM 5.3 | 244 754 |
| CVE-2026-42528 MEDIUM 4.3 | 209 588 |
| CVE-2026-42356 LOW 3.7 | 209 588 |
| CVE-2026-28780 CRITICAL 9.8 | 154 608 |
| CVE-2026-24072 HIGH 8.8 | 154 608 |
| CVE-2026-29169 HIGH 7.5 | 154 608 |
| CVE-2026-34059 HIGH 7.5 | 154 608 |
| CVE-2026-33857 MEDIUM 5.3 | 154 608 |
| CVE-2026-34032 MEDIUM 5.3 | 154 608 |
| CVE-2026-33006 MEDIUM 4.8 | 154 608 |
| CVE-2025-58098 HIGH 8.3 | 151 099 |
| CVE-2025-49812 HIGH 7.4 | 145 708 |
| CVE-2026-42535 CRITICAL 9.1 | 143 377 |
| CVE-2026-29170 MEDIUM 6.1 | 143 377 |
| CVE-2026-33523 MEDIUM 6.5 | 121 910 |
| CVE-2026-33007 MEDIUM 5.3 | 121 910 |
| CVE-2025-59775 HIGH 7.5 | 118 401 |
| CVE-2025-65082 MEDIUM 6.5 | 118 401 |
| CVE-2024-42516 HIGH 7.5 | 113 010 |
| CVE-2024-43204 HIGH 7.5 | 113 010 |
| CVE-2024-47252 HIGH 7.5 | 113 010 |
| CVE-2026-29167 CRITICAL 9.8 | 111 937 |
| CVE-2026-44631 CRITICAL 9.8 | 111 937 |
| CVE-2026-34355 HIGH 7.5 | 111 937 |
| CVE-2026-34356 HIGH 7.5 | 111 937 |
| CVE-2026-42536 HIGH 7.5 | 111 937 |
| CVE-2026-44185 HIGH 7.3 | 111 937 |
| CVE-2026-44186 HIGH 7.3 | 111 937 |
| CVE-2026-43951 MEDIUM 6.5 | 111 937 |
| CVE-2026-44119 MEDIUM 5.5 | 111 937 |
| CVE-2024-38475 CRITICAL 9.1 known exploited | 102 704 |
| CVE-2024-38474 CRITICAL 9.8 | 102 704 |
| CVE-2024-38476 CRITICAL 9.8 | 102 704 |
| CVE-2024-38473 HIGH 8.1 | 102 704 |
| CVE-2024-38472 HIGH 7.5 | 102 704 |
| CVE-2024-38477 HIGH 7.5 | 102 704 |
| CVE-2024-39573 HIGH 7.5 | 102 704 |
| CVE-2023-38709 HIGH 7.3 | 102 701 |
| CVE-2026-63718 HIGH 7.5 | 90 204 |
| CVE-2023-31122 HIGH 7.5 | 88 518 |
| CVE-2025-66200 MEDIUM 5.4 | 84 216 |
| CVE-2006-20001 HIGH 7.5 | 81 185 |
| CVE-2022-37436 MEDIUM 5.3 | 81 185 |
| CVE-2022-31813 CRITICAL 9.8 | 77 025 |
| CVE-2022-28615 CRITICAL 9.1 | 77 025 |
| CVE-2022-29404 HIGH 7.5 | 77 025 |
| CVE-2022-30556 HIGH 7.5 | 77 025 |
| CVE-2022-28614 MEDIUM 5.3 | 77 025 |
| CVE-2026-29168 HIGH 7.3 | 76 602 |
| CVE-2022-22720 CRITICAL 9.8 | 75 866 |
| CVE-2022-22721 CRITICAL 9.1 | 75 866 |
| CVE-2022-22719 HIGH 7.5 | 75 866 |
| CVE-2026-49975 HIGH 7.5 | 75 005 |
| CVE-2025-53020 HIGH 7.5 | 74 783 |
| CVE-2025-55753 HIGH 7.5 | 73 093 |
| CVE-2025-49630 HIGH 7.5 | 70 147 |
| CVE-2024-24795 MEDIUM 6.3 | 70 003 |
| CVE-2021-44790 CRITICAL 9.8 | 67 828 |
| CVE-2025-23048 CRITICAL 9.1 | 66 466 |
| CVE-2021-40438 CRITICAL 9.0 known exploited | 66 113 |
| CVE-2021-39275 CRITICAL 9.8 | 66 113 |
| CVE-2021-34798 HIGH 7.5 | 66 113 |
| CVE-2024-27316 HIGH 7.5 | 62 556 |
| CVE-2023-25690 CRITICAL 9.8 | 49 599 |
| CVE-2022-36760 CRITICAL 9.0 | 48 487 |
| CVE-2023-45802 MEDIUM 5.9 | 48 373 |
| CVE-2022-26377 HIGH 7.5 | 44 327 |
| CVE-2022-23943 CRITICAL 9.8 | 43 168 |
| CVE-2026-48913 HIGH 7.3 | 41 170 |
| CVE-2018-1303 HIGH 7.5 | 36 295 |
| CVE-2018-1301 MEDIUM 5.9 | 36 295 |
| CVE-2018-1302 MEDIUM 5.9 | 36 295 |
| CVE-2023-27522 HIGH 7.5 | 35 071 |
| CVE-2017-9798 HIGH 7.5 | 34 519 |
| CVE-2017-9788 CRITICAL 9.1 | 33 366 |
| CVE-2021-44224 HIGH 8.2 | 31 725 |
| CVE-2021-26691 CRITICAL 9.8 | 31 646 |
| CVE-2021-26690 HIGH 7.5 | 31 646 |
| CVE-2020-35452 HIGH 7.3 | 31 646 |
| CVE-2019-17567 MEDIUM 5.3 | 31 111 |
| CVE-2016-8612 MEDIUM 4.3 | 30 688 |
| CVE-2015-0228 MEDIUM 5.0 | 26 913 |
| CVE-2020-1927 MEDIUM 6.1 | 26 163 |
| CVE-2020-1934 MEDIUM 5.3 | 26 163 |
| CVE-2021-33193 HIGH 7.5 | 25 968 |
| CVE-2026-46729 HIGH 7.5 | 25 291 |
Hosts: matches on services open at each host's latest check, over every version.