PT-2026-47324

CVE-2026-44186

·

Published

2026-04-27

·

Updated

2026-10-19

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67
Description The mod proxy ftp module contains a loop with an unreachable exit condition, leading to an infinite loop when interacting with an attacker-controlled backend FTP server.
Recommendations Upgrade to version 2.4.68.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')
Related identifiers
CVE-2026-44186
BDU:2026-09750
ALSA-2026:34109
ALSA-2026:41906
ALSA-2026:42828
AZL-89741
BIT-APACHE-2026-44186
CLSA-2026-1781557190
CLSA-2026-1782144906
CLSA-2026-1782153378
CLSA-2026-1782160246
CLSA-2026-1782160524
CLSA-2026-1782293598
CLSA-2026-1782978404
CLSA-2026-1782980275
CLSA-2026-1782980618
CLSA-2026-1782987076
CLSA-2026-1782987193
CLSA-2026-1783698569
CLSA-2026-1786004455
CLSA-2026-1791487799
ECHO-16E4-FFAC-D93D
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:34109
RHSA-2026:41906
RHSA-2026:42828
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8571-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com