CVE-2026-42528
Medium · 4.3CVSS
4.3
EPSS
0.4%
Published
Oct 1, 2026
CISA due date
—
The record
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62297 ag-psd is a JavaScript library for reading and writing Photoshop Document files. CWE-789
- CVE-2026-62254 LibreDWG is a free C library to read and write DWG files. CWE-789
- CVE-2026-61845 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3… CWE-789
- CVE-2026-115865 Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to… CWE-789
- CVE-2026-119280 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-789
- CVE-2026-119278 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-789
- CVE-2026-119276 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-789
- CVE-2026-118590 A security vulnerability has been detected in nipy nibabel up to 5.4.2. CWE-789