IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch

CVE-2026-63718Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Apache Software Foundation Apache HTTP Server Veröffentlicht: (vor 1 Monat)

Beschreibung

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68.

Schwachstellentyp (CWE): CWE-444

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Apache Software Foundation Apache HTTP Server 2.4.30 – ≤ 2.4.68
apache http server 2.4.30 – < 2.4.69

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* ≥ 2.4.30 < 2.4.69

Neue CVEs im selben Produkt — Apache HTTP Server

7.5Hoch
CVE-2026-63686

Apache HTTP Server: mod_xml2enc crash on charset conversion failure

Apache Software Foundation Apache HTTP Server

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds…

8.8Hoch
CVE-2026-93546

Apache HTTP Server: mod_dav_fs namespace overflow

Apache Software Foundation Apache HTTP Server

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces.

5.3Mittel
CVE-2026-79768

Apache HTTP Server: mod_userdir information disclosure

Apache Software Foundation Apache HTTP Server

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir) This issue…