Apache HTTP Server 2.2.34
http_serverevery versioncounted 2026-10-08 03:20 UTC
As of 2026-10-08, 608 hosts ran Apache HTTP Server 2.2.34 with at least one known CVE on a service open at their latest check; 36 distinct CVEs match this version.
Known CVEs on hosts running it
608hosts with known CVEs
36distinct CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 38 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2021-40438 CRITICAL 9.0 known exploited | 608 |
| CVE-2021-39275 CRITICAL 9.8 | 608 |
| CVE-2021-44790 CRITICAL 9.8 | 608 |
| CVE-2022-22720 CRITICAL 9.8 | 608 |
| CVE-2022-31813 CRITICAL 9.8 | 608 |
| CVE-2026-28780 CRITICAL 9.8 | 608 |
| CVE-2022-22721 CRITICAL 9.1 | 608 |
| CVE-2022-28615 CRITICAL 9.1 | 608 |
| CVE-2026-24072 HIGH 8.8 | 608 |
| CVE-2025-58098 HIGH 8.3 | 608 |
| CVE-2006-20001 HIGH 7.5 | 608 |
| CVE-2017-9798 HIGH 7.5 | 608 |
| CVE-2018-1303 HIGH 7.5 | 608 |
| CVE-2021-34798 HIGH 7.5 | 608 |
| CVE-2022-22719 HIGH 7.5 | 608 |
| CVE-2022-29404 HIGH 7.5 | 608 |
| CVE-2022-30556 HIGH 7.5 | 608 |
| CVE-2023-31122 HIGH 7.5 | 608 |
| CVE-2026-29169 HIGH 7.5 | 608 |
| CVE-2026-34059 HIGH 7.5 | 608 |
| CVE-2025-49812 HIGH 7.4 | 608 |
| CVE-2023-38709 HIGH 7.3 | 608 |
| CVE-2018-1301 MEDIUM 5.9 | 608 |
| CVE-2018-1302 MEDIUM 5.9 | 608 |
| CVE-2022-28614 MEDIUM 5.3 | 608 |
| CVE-2022-37436 MEDIUM 5.3 | 608 |
| CVE-2026-33857 MEDIUM 5.3 | 608 |
| CVE-2026-34032 MEDIUM 5.3 | 608 |
| CVE-2015-0228 MEDIUM 5.0 | 608 |
| CVE-2026-33006 MEDIUM 4.8 | 608 |
| CVE-2016-8612 MEDIUM 4.3 | 608 |
| CVE-2026-42535 CRITICAL 9.1 | 593 |
| CVE-2026-93546 HIGH 8.8 | 593 |
| CVE-2026-29170 MEDIUM 6.1 | 593 |
| CVE-2024-40898 HIGH 7.5 | 83 |
| CVE-2022-28330 MEDIUM 5.3 | 83 |
Hosts: matches on services open at each host's latest check.