Skip to content

CVE record · 2 sources

CVE-2026-79768

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard…

Vendor: Apache Software Foundation
Product: Apache HTTP Server
EPSS: 0.004 (p37)
Exposure class: Operating system, Web platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

46

Ubuntu notice Ubuntu 6h ago

Apache HTTP Server vulnerabilities

Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

CVE-2026-46729 CVE-2026-47360 CVE-2026-48005+14 more Canonical Apache Software Foundation
11

CVE NVD 1 Oct 2026

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard…

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in…

CVE-2026-79768 Apache Software Foundation