Hosts vulnerable to CVE-2026-23918
CVE-2026-23918 — severity high, CVSS 8.8 — 50 affected hosts indexed by QROS Explore.
About CVE-2026-23918
Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
Showing 48 of 50 hosts, ranked by risk score.
ernieserver.hsm.de (171.25.225.119)
Germany · Nuremberg
3 open ports · 60 CVE · risk 100/100 · critical
http, ssh
static.12.37.233.167.clients.your-server.de (167.233.37.12)
Germany · Nuremberg
3 open ports · 61 CVE · risk 100/100 · critical
http, ssh
68.183.232.51
Singapore · Singapore (Pioneer)
3 open ports · 4 CVE · risk 98/100 · critical
http, ssh
auth.gemeinschaftswerk-nachhaltigkeit.de (188.40.17.189)
Germany · Falkenstein
4 open ports · 4 CVE · risk 98/100 · critical
http, ssh
mail.keystorage.de (5.75.151.50)
Germany · Nuremberg
7 open ports · 5 CVE · risk 98/100 · critical
http, ssh, tls
support.heliguy.com (46.101.78.47)
United Kingdom · Ormskirk
4 open ports · 4 CVE · risk 98/100 · critical
http, mysql, ssh
68.183.87.114
India · Bengaluru
16 open ports · 4 CVE · risk 98/100 · critical
adb, dnp3, http, modbus, mongodb, mqtt, s7, ssh
226387.fornex.cloud (31.172.70.170)
Germany · Frankfurt am Main
12 open ports · 4 CVE · risk 98/100 · critical
http, ssh, tls
agustinwallasch.com.ar (67.207.82.71)
United States · North Bergen
5 open ports · 3 CVE · risk 98/100 · critical
http, ssh
ejornada.es (24.144.76.21)
The Netherlands · Amsterdam
4 open ports · 6 CVE · risk 98/100 · critical
http, ssh
os2display.koege.dk (168.119.55.98)
Germany · Falkenstein
3 open ports · 4 CVE · risk 98/100 · critical
http, ssh
131.red.66.37.46.procono.es (46.37.66.131)
Spain · Málaga
2 open ports · 1 CVE · risk 88/100 · high
http
vps-fc7f487a.vps.ovh.us (15.204.238.211)
United States · Reston
2 open ports · 1 CVE · risk 88/100 · high
http, ssh
olkko.refox.fi (65.108.53.94)
Finland · Helsinki
2 open ports · 9 CVE · risk 88/100 · high
http
static.39.135.168.204.clients.your-server.de (204.168.135.39)
Finland · Helsinki
4 open ports · 4 CVE · risk 88/100 · high
http, ssh
23.137.200.18
United States · Lynnwood
4 open ports · 1 CVE · risk 88/100 · high
http, ssh
static.222.87.99.88.clients.your-server.de (88.99.87.222)
Germany · Falkenstein
3 open ports · 1 CVE · risk 88/100 · high
http
sites.toyota.pl (64.225.111.163)
Germany · Melbeck
2 open ports · 1 CVE · risk 88/100 · high
http
gest.megiston.com (162.55.58.229)
Germany · Nuremberg
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
www.gamenews.my.id (64.225.8.58)
United States · Clifton
6 open ports · 1 CVE · risk 88/100 · high
http, mysql
een.se (5.39.68.121)
France · Roubaix
4 open ports · 1 CVE · risk 88/100 · high
http, ssh
147.254.60.213.static.reverse-mundo-r.com (213.60.254.147)
Spain · A Coruña
4 open ports · 1 CVE · risk 88/100 · high
http, sip, tls
beta.zamani.tech (40.160.227.58)
United States · Portland
4 open ports · 3 CVE · risk 88/100 · high
http, ssh
tasinanta.net (57.131.39.22)
Italy · Milan
6 open ports · 3 CVE · risk 88/100 · high
http, mongodb, ssh
bpm.int.fogbeam.com (40.160.250.63)
United States · Miami
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
5cecf741c1358dabf97557ea8c8e6539.f0bfc9aa4a8dddf8a8fbe91752adcbdc.traefik.default (168.119.108.202)
Germany · Falkenstein
2 open ports · 1 CVE · risk 88/100 · high
http
support.dan-itsystems.de (116.202.229.234)
Germany · Falkenstein
2 open ports · 1 CVE · risk 88/100 · high
http
api.pudo.elta-courier.gr (46.62.132.198)
Finland · Helsinki
2 open ports · 1 CVE · risk 88/100 · high
http
nextcloud.local (5.9.55.233)
Germany · Falkenstein
10 open ports · 1 CVE · risk 88/100 · high
http, ssh, tls
vps-1a51d813.vps.ovh.us (40.160.227.158)
United States · Portland
4 open ports · 1 CVE · risk 88/100 · high
http, ssh
hosted-by.privateweb.is (81.17.30.228)
Switzerland · Bern
2 open ports · 1 CVE · risk 88/100 · high
http, ssh
korporativo.app (40.160.233.152)
United States · Miami (Downtown Miami)
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
api.certfolio.me (64.226.80.9)
Germany · Frankfurt am Main
4 open ports · 3 CVE · risk 88/100 · high
http, ssh
2196-maxtanzt25-multi-edit.e5j.de (162.55.165.99)
Germany · Falkenstein
2 open ports · 1 CVE · risk 88/100 · high
http
imap.happypetversichert.de (188.245.103.39)
Germany · Nuremberg
8 open ports · 1 CVE · risk 88/100 · high
http, tls
infinite.therightstuff.at (91.98.160.20)
Germany · Nuremberg
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
shop.ics-care.de (116.203.134.63)
Germany · Nuremberg
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
catamayo.cristophernagua.com (24.144.68.12)
United States · Santa Clara
6 open ports · 1 CVE · risk 88/100 · high
http, rpcbind
aiblog.fogbeam.com (40.160.250.61)
United States · Miami
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
pilvi.omegakeittiot.fi (95.216.24.120)
Finland · Helsinki
2 open ports · 1 CVE · risk 88/100 · high
http
signsfa.com (15.204.119.151)
United States · Hillsboro
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
156-75-83-5-red-servicios.onlycable.es (5.83.75.156)
Spain · Osuna
2 open ports · 2 CVE · risk 88/100 · high
http
eqb-mig.dataforge.ch (148.251.72.206)
Germany · Falkenstein
2 open ports · 1 CVE · risk 88/100 · high
http
static.210.86.98.91.clients.your-server.de (91.98.86.210)
Germany · Falkenstein
4 open ports · 3 CVE · risk 88/100 · high
http, ssh
smartercater.com (40.160.254.18)
United States · Portland
4 open ports · 1 CVE · risk 88/100 · high
http, ssh, tls
ip98.ip-5-196-41.eu (5.196.41.98)
France · Paris
3 open ports · 1 CVE · risk 88/100 · high
http
static.23.151.98.91.clients.your-server.de (91.98.151.23)
Germany · Falkenstein
6 open ports · 1 CVE · risk 88/100 · high
http, ssh
bot.tl-oudre.ir (91.107.179.90)
Germany · Falkenstein
3 open ports · 1 CVE · risk 88/100 · high
http, ssh
Search all CVE-2026-23918 hosts in Explore
Open in Explore →