CVE-2026-42528

Published 1 October 2026 · tracked since 2 October 2026

Description

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes.Users are recommended to upgrade to version 2.4.69, which fixes this issue

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103921 HIGH 7.4
• CVE-2026-101888 HIGH 7.2
• CVE-2026-101889 MEDIUM 6.5
• CVE-2026-101890 MEDIUM 5.4
• CVE-2026-94620
• CVE-2026-46729 HIGH 7.5
• CVE-2026-47360 HIGH 7.5
• CVE-2026-42356 LOW 3.7
• CVE-2026-103690 MEDIUM 6.3
• CVE-2026-97284 HIGH 8.8

→ Open the live CVE board · all tools