USN-8931-1: Apache HTTP Server vulnerabilities
Ubuntu patched Apache HTTP Server flaws that may leak data, misroute proxy requests, or allow denial of service or code execution.
Ubuntu Security Notice USN-8931-1 covers multiple Apache HTTP Server vulnerabilities. CVE-2026-58415 may let a remote attacker read sensitive WebDAV property data. CVE-2026-63045 involves improper validation of FTP responses that could make a forward proxy connect to an arbitrary host. CVE-2026-63292 concerns mishandled HTTP requests that could cause denial of service or arbitrary code execution. The notice does not report active exploitation.
- CVE-2026-58415 may expose WebDAV property information to remote attackers.
- CVE-2026-63045 may let a forward proxy connect to an arbitrary host.
- CVE-2026-63292 may cause denial of service or arbitrary code execution.
- Ubuntu published the fixes in USN-8931-1; exploitation is not reported.
Vulnerabilities mentionedAll →
- CVE-2026-632927.5<1%Stack buffer overflow in Apache HTTP Server mod_vhost_aliaspublished · Apache Software Foundation Apache HTTP Server PoC +2 related
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-63292 |
이지웅 discovered that Apache HTTP Server exposed WebDAV property information. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-58415) Zhen Kong and Charles Vosburgh discovered that Apache HTTP Server did not properly validate FTP server responses. A remote attacker could possibly use this issue to make a forward proxy connect to an arbitrary host. (CVE-2026-63045) Hyojae Lee and Zhen Kong discovered that Apache HTTP Server incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-63292) Lucian Nitescu and Zhen Kong discovered that Apache HTTP Server did…
This source does not provide full text. Read it at ubuntu.com.