CVE-2026-58415
Apache HTTP Server: mod_dav_fs property database read access
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
| CWE | CWE-552 |
| Vendor | apache software foundation |
| Product | apache http server |
| Published | Oct 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for apache software foundation apache http server
Be the first to know when new unknown vulnerabilities affecting apache software foundation apache http server are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
Affected Versions
Apache Software Foundation / Apache HTTP Server
2.4.0 โค 2.4.68
References
Credits
์ด์ง์
(kimchunbok) sungbyeongchan