Apache HTTP Server Exposure of Resource to Wrong Sphere Vulnerability - CVE-2026-42535 - Vulnerability Database

Apache HTTP Server Exposure of Resource to Wrong Sphere Vulnerability - CVE-2026-42535

Critical

Reference: CVE-2026-42535

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-42535

Title: Apache HTTP Server Exposure of Resource to Wrong Sphere Vulnerability

Overview:

A path handling issue in mod_dav_fs in Apache 2.4.67 and earlierallows a WebDAV content author to directly manipulate trusted DAV property databases potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68 which fixes this issue.