PT-2026-47319

CVE-2026-42535

·

Published

2026-06-08

·

Updated

2026-10-07

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache versions prior to 2.4.68
Description A path handling issue in the mod dav fs module allows a WebDAV content author to directly manipulate trusted DAV property databases, which can potentially lead to child process crashes.
Recommendations Upgrade to version 2.4.68.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-668: Exposure of Resource to Wrong Sphere
Related identifiers
CVE-2026-42535
BDU:2026-12018
ALSA-2026:34109
ALSA-2026:41906
AZL-89738
BIT-APACHE-2026-42535
CLSA-2026-1781194173
CLSA-2026-1781209763
CLSA-2026-1781210149
CLSA-2026-1781261042
CLSA-2026-1781352817
CLSA-2026-1781622427
CLSA-2026-1781623309
CLSA-2026-1781623818
CLSA-2026-1781627270
CLSA-2026-1781628808
CLSA-2026-1782141694
CLSA-2026-1782295363
CLSA-2026-1783698569
ECHO-1BCA-9C80-069E
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:34109
RHSA-2026:41906
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8571-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com