PT-2026-47314

CVE-2026-29170

·

Published

2026-06-08

·

Updated

2026-10-07

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.68
Description A cross-site scripting issue exists in the HTML directory list generation of mod proxy ftp when listing FTP directory contents through forward or reverse proxy configurations.
Recommendations Upgrade to version 2.4.68.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2026-29170
BDU:2026-11947
AZL-89723
BIT-APACHE-2026-29170
CLSA-2026-1781194173
CLSA-2026-1781209763
CLSA-2026-1781210149
CLSA-2026-1781255857
CLSA-2026-1781261042
CLSA-2026-1781622427
CLSA-2026-1781623309
CLSA-2026-1781623818
CLSA-2026-1781627270
CLSA-2026-1781628808
CLSA-2026-1782141694
CLSA-2026-1782295363
CLSA-2026-1783698569
ECHO-22E1-03D3-BB43
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8589-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com