Unrated severityNVD Advisory· Published Oct 1, 2026

CVE-2026-58415

Description

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Apache HTTP Serverllm-create
Range: <2.4.69

Patches

Vulnerability mechanics

References

httpd.apache.org/security/vulnerabilities_24.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000