CVE-2026-114459
Last modified
CVE-2026-114459 is a low-severity vulnerability rated 3.7/10 on the CVSS scale. A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| pbuchbinder | mod_qos | 11.74; 11.76; 11.79 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-114459?
How severe is CVE-2026-114459?
How do I fix CVE-2026-114459?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-114440A vulnerability was identified in oretnom23 php-travel-agenc…7.3
- CVE-2026-114441A weakness has been identified in oretnom23 php-travel-agenc…7.3
- CVE-2026-114443The Security Plugin, Firewall & Malware Scanner with Auto Re…7.5
- CVE-2026-114444The Security Plugin, Firewall & Malware Scanner with Auto Re…4.4
- CVE-2026-114457A flaw was found in mod_qos. An unauthenticated remote attac…3.7
- CVE-2026-114458A flaw was found in mod_qos. An unauthenticated remote attac…5.9
- CVE-2026-11446The Booktics – Booking Calendar for Appointments and Service…5.3
- CVE-2026-114460A flaw was found in mod_qos. An off-by-one pointer calculati…5.3
- CVE-2026-114462Improper link resolution before file access ('link following…6
- CVE-2026-114463The webhook platform gateway in Nous Research Hermes Agent v…7.5
- CVE-2026-11447A security flaw has been discovered in GL.iNet GL-MT3000 up …6.3
- CVE-2026-114470Cross-site request forgery in the REST API of Progressive Ro…5.3
Are you affected by CVE-2026-114459?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST