PT-2026-47314 · Apache+3 · Apache Http Server+3

CVE-2026-29170

·

Published

2026-06-08

·

Updated

2026-08-23

CVSS v2.0

6.4

Medium

VectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.68
Description A cross-site scripting issue exists in the HTML directory list generation of mod proxy ftp when listing FTP directory contents through forward or reverse proxy configurations.
Recommendations Upgrade to version 2.4.68.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

AZL-89723
BDU:2026-11947
BIT-APACHE-2026-29170
CVE-2026-29170
ECHO-22E1-03D3-BB43
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8589-1

Affected Products

Apache Http Server
Linuxmint
Red Os
Ubuntu