Apache HTTP Server 2.2.9
http_serverevery versioncounted 2026-10-10 04:20 UTC
As of 2026-10-10, 1 228 hosts ran Apache HTTP Server 2.2.9 with at least one known CVE on a service open at their latest check; 86 distinct CVEs match this version.
Known CVEs on hosts running it
1 228hosts with known CVEs
86distinct CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 14 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2008-0456 LOW 2.6 | 1 228 |
| CVE-2021-40438 CRITICAL 9.0 known exploited | 375 |
| CVE-2009-3555 CRITICAL 9.8 | 375 |
| CVE-2017-3167 CRITICAL 9.8 | 375 |
| CVE-2017-7679 CRITICAL 9.8 | 375 |
| CVE-2021-39275 CRITICAL 9.8 | 375 |
| CVE-2021-44790 CRITICAL 9.8 | 375 |
| CVE-2022-22720 CRITICAL 9.8 | 375 |
| CVE-2022-31813 CRITICAL 9.8 | 375 |
| CVE-2026-28780 CRITICAL 9.8 | 375 |
| CVE-2017-9788 CRITICAL 9.1 | 375 |
| CVE-2022-22721 CRITICAL 9.1 | 375 |
| CVE-2022-28615 CRITICAL 9.1 | 375 |
| CVE-2026-24072 HIGH 8.8 | 375 |
| CVE-2025-58098 HIGH 8.3 | 375 |
| CVE-2016-5387 HIGH 8.1 | 375 |
| CVE-2011-3192 HIGH 7.8 | 375 |
| CVE-2006-20001 HIGH 7.5 | 375 |
| CVE-2009-1955 HIGH 7.5 | 375 |
| CVE-2009-2699 HIGH 7.5 | 375 |
| CVE-2016-8743 HIGH 7.5 | 375 |
| CVE-2017-9798 HIGH 7.5 | 375 |
| CVE-2018-1303 HIGH 7.5 | 375 |
| CVE-2021-34798 HIGH 7.5 | 375 |
| CVE-2022-22719 HIGH 7.5 | 375 |
| CVE-2022-29404 HIGH 7.5 | 375 |
| CVE-2022-30556 HIGH 7.5 | 375 |
| CVE-2023-31122 HIGH 7.5 | 375 |
| CVE-2026-29169 HIGH 7.5 | 375 |
| CVE-2026-34059 HIGH 7.5 | 375 |
| CVE-2025-49812 HIGH 7.4 | 375 |
| CVE-2023-38709 HIGH 7.3 | 375 |
| CVE-2009-1890 HIGH 7.1 | 375 |
| CVE-2009-1891 HIGH 7.1 | 375 |
| CVE-2012-0883 MEDIUM 6.9 | 375 |
| CVE-2014-0226 MEDIUM 6.8 | 375 |
| CVE-2009-1956 MEDIUM 6.4 | 375 |
| CVE-2016-4975 MEDIUM 6.1 | 375 |
| CVE-2018-1301 MEDIUM 5.9 | 375 |
| CVE-2018-1302 MEDIUM 5.9 | 375 |
| CVE-2022-28614 MEDIUM 5.3 | 375 |
| CVE-2022-37436 MEDIUM 5.3 | 375 |
| CVE-2026-33857 MEDIUM 5.3 | 375 |
| CVE-2026-34032 MEDIUM 5.3 | 375 |
| CVE-2013-1862 MEDIUM 5.1 | 375 |
| CVE-2007-6750 MEDIUM 5.0 | 375 |
| CVE-2009-3095 MEDIUM 5.0 | 375 |
| CVE-2009-3560 MEDIUM 5.0 | 375 |
| CVE-2009-3720 MEDIUM 5.0 | 375 |
| CVE-2010-0408 MEDIUM 5.0 | 375 |
| CVE-2010-1452 MEDIUM 5.0 | 375 |
| CVE-2010-1623 MEDIUM 5.0 | 375 |
| CVE-2011-3368 MEDIUM 5.0 | 375 |
| CVE-2013-5704 MEDIUM 5.0 | 375 |
| CVE-2013-6438 MEDIUM 5.0 | 375 |
| CVE-2014-0098 MEDIUM 5.0 | 375 |
| CVE-2014-0231 MEDIUM 5.0 | 375 |
| CVE-2015-0228 MEDIUM 5.0 | 375 |
| CVE-2015-3183 MEDIUM 5.0 | 375 |
| CVE-2009-1195 MEDIUM 4.9 | 375 |
| CVE-2026-33006 MEDIUM 4.8 | 375 |
| CVE-2012-0031 MEDIUM 4.6 | 375 |
| CVE-2011-3607 MEDIUM 4.4 | 375 |
| CVE-2008-0455 MEDIUM 4.3 | 375 |
| CVE-2008-2939 MEDIUM 4.3 | 375 |
| CVE-2009-0023 MEDIUM 4.3 | 375 |
| CVE-2010-0434 MEDIUM 4.3 | 375 |
| CVE-2011-0419 MEDIUM 4.3 | 375 |
| CVE-2011-3639 MEDIUM 4.3 | 375 |
| CVE-2011-4317 MEDIUM 4.3 | 375 |
| CVE-2012-0053 MEDIUM 4.3 | 375 |
| CVE-2012-3499 MEDIUM 4.3 | 375 |
| CVE-2012-4558 MEDIUM 4.3 | 375 |
| CVE-2013-1896 MEDIUM 4.3 | 375 |
| CVE-2014-0118 MEDIUM 4.3 | 375 |
| CVE-2016-8612 MEDIUM 4.3 | 375 |
| CVE-2009-3094 LOW 2.6 | 375 |
| CVE-2012-2687 LOW 2.6 | 375 |
| CVE-2011-4415 LOW 1.2 | 375 |
| CVE-2026-42535 CRITICAL 9.1 | 340 |
| CVE-2026-93546 HIGH 8.8 | 340 |
| CVE-2026-29170 MEDIUM 6.1 | 340 |
| CVE-2010-0425 HIGH 10.0 | 92 |
| CVE-2024-40898 HIGH 7.5 | 92 |
| CVE-2022-28330 MEDIUM 5.3 | 92 |
| CVE-2010-2068 MEDIUM 5.0 | 92 |
Hosts: matches on services open at each host's latest check.