CVE-2026-93546 — Apache HTTP Server: mod_dav_fs namespace overflow
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a …
Published: 2026-10-01 · CVSS: 8.8 · CVSS 3.1
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7