The Apache Foundation has issued a Security Advisory to address a vulnerability in Apache HTTP Server’s reverse proxy mode. Exploitation of this vulnerability may allow a remote attacker to gain access to internal systems.
US-CERT encourages users and administrators to review the Apache HTTP Server Security Advisory mod_proxy reverse proxy exposure and apply any necessary updates or workarounds to help mitigate the risks.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-3502 TrueConf Client…