Veille CVE

Jeudi 1 octobre 2026

3 CVE sur 20

Critique 3 Élevée 13 Moyenne 3 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Apache Software Foundation Apache HTTP Server » ✕
  1. CVE-2026-79768 5.3 Moyenne

    Apache Software Foundation Apache HTTP Server · Apache http server

    Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

  2. CVE-2026-58415 5.3 Moyenne

    Apache Software Foundation Apache HTTP Server · Apache http server

    Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

  3. CVE-2026-42528 4.3 Moyenne

    Apache Software Foundation Apache HTTP Server · Apache http server

    A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue