CVE Catalog
CVE-2026-42535
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.54%
42th percentile - higher than 42% of all known CVEs
Summary
A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.
Risk Assessment
An attacker with WebDAV content authoring privileges can cause Apache child process crashes, leading to service disruption.
Recommendation
Update Apache HTTP Server to version 2.4.68, which fixes this issue.
Original NVD description (English source)
A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which fixes this issue.