{"affected":[{"defaultStatus":"unaffected","product":"Apache HTTP Server","source":"CNA: apache","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"2.4.70","status":"affected","version":"2.4.69","versionType":"semver"}]}],"cveId":"CVE-2026-109163","cwes":["CWE-121"],"description":"Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292)\n\n\n\nThis issue affects Apache HTTP Server: 2.4.69.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794408908116,"publishedAt":1794408908116,"references":[{"source":"CNA: apache","tags":["vendor-advisory"],"url":"https://httpd.apache.org/security/vulnerabilities_24.html"}],"remediation":[],"revision":"dcae1d002237c5f50d6c0932a7f3edec2f71a2ab4dd1ed6ef98d06bf8ee479dd","sources":[{"modifiedAt":1794408908116,"name":"CNA: apache","retrievedAt":1794409708214,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109163"}],"ssvc":null,"status":"published","title":"Apache HTTP Server: mod_vhost_alias 1 byte stack buffer overwrite (after CVE-2026-63292)","updatedAt":1794409708214}