CVE-2026-42528

Vendor

Apache Software Foundation

Product

Apache HTTP Server

CVSS

4.3

EPSS

0.003 (p23)

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 46
   Ubuntu notice Ubuntu 3h ago

   Apache HTTP Server vulnerabilities

   Zhenpeng Lin discovered that Apache HTTP Server's mod_dav module incorrectly calculated memory sizes when handling WebDAV locks. An attacker with permission to create WebDAV locks could possibly use this issue to cause Apache…

   CVE-2026-42528CVE-2026-109163CVE-2026-106023+2 more Canonical Apache Software Foundation
2. 19
   CVE NVD 1 Oct 2026

   A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server…

   A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes…

   CVSS 4.3 Fix available CVE-2026-42528 Apache Software Foundation