Logo
›
›vulnerability›CVE-2026-42528
Name
CVE-2026-42528
Source
NVD ( link)Debian ( link)
Description
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
apache2
Exploitable

Vulnerability Ratings#


4.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.4.68
Exploitable
buildroot
master
2.4.69
Not Affected
openwrt
master
2.4.65-r1
Exploitable
openwrt
openwrt-25.12
2.4.65-r1
Exploitable
yocto
kirkstone
2.4.66
Exploitable
yocto
scarthgap
2.4.68
Exploitable