openwrt ▾
›
openwrt-25.12 ▾
›
vulnerability
›
CVE-2026-42528
Component Overview
Vulnerability Overview
Name
CVE-2026-42528
Source
NVD (
link
)
Debian (
link
)
Description
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue
CWEs
CWE-789
Published Date
Oct 1, 2026
Updated Date
Oct 6, 2026
Workaround
-
Advisories
https://httpd.apache.org/security/vulnerabilities_24.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/10/01/12
Mailing List
Analysis
#
Affected Component
Analysis
apache
Exploitable
Vulnerability Ratings
#
4.3
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
apache
buildroot
2025.02.x
2.4.68
Exploitable
apache
buildroot
master
2.4.69
Not Affected
apache
openwrt
master
2.4.65-r1
Exploitable
apache2
yocto
kirkstone
2.4.66
Exploitable
apache2
yocto
master
2.4.68
Exploitable
apache2
yocto
scarthgap
2.4.68
Exploitable