CVE-2026-42528

Medium4.3 Published on Oct 1, 2026

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue

CVSS score4.3 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness type (CWE)CWE-789

Vendorsapache

Affected products

Vendors	Product	Versions
apache	http server	< 2.4.69

Vulnerabilities

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

Oct 5, 202619:36 7 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle