CVE-2025-55753

HighCVSS 7.5/10Last modified Oct 18, 2026

Description

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.

This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Dec 5, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-557549.6Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences iCVE-2025-557576.1A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered.CVE-2025-557585.4Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered.CVE-2025-55769.8A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects soCVE-2025-557637.5Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a craCVE-2025-55779.8A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown funCVE-2025-55789.8A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerabilitCVE-2025-557807.5A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. SCVE-2025-557879.8In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.CVE-2025-55799.8A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unkCVE-2025-557953.5The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during eCVE-2025-557967.5The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup con