PT-2026-36812
CVE-2026-29169
·
Published
2026-03-04
·
Updated
2026-08-27
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache HTTP Server versions prior to 2.4.66
Description
A NULL pointer dereference in the
mod dav lock module may allow an attacker to crash the server by sending a malicious request. A NULL pointer dereference occurs when a program attempts to read or write to a memory address that is NULL, typically leading to an application crash.Recommendations
Upgrade to version 2.4.66.
Remove the
mod dav lock module.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾