CVE-2026-59685: Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-01 12:00 UTC
  • Importiert: 2026-10-15 12:54 UTC
  • CVSS: 7.5
  • Quelle-ID: apache_httpd_sec
  • uid_hash: 56241f62db8c8c36722f8d6d2d8fa3988531aeec348c227bad566834027b3503

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-59685

HIGH

7.5

HIGH

7.5

2026-10-01

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Apache HTTP Server Security (httpd.org JSON)

apache_httpd_sec

vendor_advisory webserver, httpd - de https://httpd.apache.org/security/vulnerabilities-httpd.json