CVE-2026-58415
5.3 MEDIUMPublished 2026-10-01 · Updated 2026-10-05
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-552
Vendors
apache
Products
http server
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100727
- HIGHCVE-2026-102695PoC
- MEDIUMCVE-2026-105750PoC
- UNSCOREDCVE-2026-108070
- MEDIUMCVE-2026-108938PoC
- UNSCOREDCVE-2026-109162PoC
- MEDIUMCVE-2026-15915
- UNSCOREDCVE-2026-21589PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.