The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes.
Users are recommended to upgrade to version 2.4.69, which fixes this issue
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache2 | Oct 5, 2026 | Oct 1, 2026 |
| Amazon Linux Ami 2 | — | Upgrade httpd-manualUpgrade httpd-filesystemUpgrade mod_sessionUpgrade mod_ldapUpgrade mod_http2Upgrade httpd-debuginfoUpgrade mod_sslUpgrade mod_mdUpgrade mod_proxy_htmlUpgrade httpd-toolsUpgrade httpd-develUpgrade httpd | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade mod_http2-debuginfoUpgrade mod_sslUpgrade mod_proxy_html-debuginfoUpgrade httpd-filesystemUpgrade httpd-debuginfoUpgrade mod_ssl-debuginfoUpgrade httpdUpgrade httpd-develUpgrade mod_sessionUpgrade mod_luaUpgrade mod_ldapUpgrade mod_lua-debuginfoUpgrade mod_session-debuginfoUpgrade httpd-tools-debuginfoUpgrade mod_http2Upgrade httpd-core-debuginfoUpgrade mod_proxy_htmlUpgrade mod_ldap-debuginfoUpgrade httpd-manualUpgrade httpd-toolsUpgrade httpd-debugsourceUpgrade httpd-core | Oct 13, 2026 | Oct 1, 2026 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Oct 2, 2026 | Oct 1, 2026 |
| Debian | — | Upgrade apache2 | Oct 20, 2026 | Oct 1, 2026 |
| Freebsd | — | Upgrade apache24 | Oct 5, 2026 | Oct 1, 2026 |
| Redhat_linux | — | No solution exists | Oct 5, 2026 | Oct 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Oct 1, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub