CVE-2026-114457

A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded input, the module reads past allocated memory boundaries, which can cause an Apache worker process to crash.

• CWE-170

• https://access.redhat.com/security/cve/CVE-2026-114457
• https://bugzilla.redhat.com/show_bug.cgi?id=2558311

Published

Oct 22, 2026

Last Modified

Oct 26, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114438A flaw was found in the Update User Locale required action o…4.2
• CVE-2026-114439A vulnerability was determined in oretnom23 php-travel-agenc…7.3
• CVE-2026-114440A vulnerability was identified in oretnom23 php-travel-agenc…7.3
• CVE-2026-114441A weakness has been identified in oretnom23 php-travel-agenc…7.3
• CVE-2026-114443The Security Plugin, Firewall & Malware Scanner with Auto Re…7.5
• CVE-2026-114444The Security Plugin, Firewall & Malware Scanner with Auto Re…4.4
• CVE-2026-114458A flaw was found in mod_qos. An unauthenticated remote attac…5.9
• CVE-2026-114459A flaw was found in mod_qos. When inspecting HTTP response b…3.7
• CVE-2026-11446The Booktics – Booking Calendar for Appointments and Service…5.3
• CVE-2026-114460A flaw was found in mod_qos. An off-by-one pointer calculati…5.3
• CVE-2026-114462Improper link resolution before file access ('link following…6
• CVE-2026-114463The webhook platform gateway in Nous Research Hermes Agent v…7.5