CVE-2026-63045 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 14, 2026 · Ubuntu Security Notices

   Detected

   이지웅 discovered that Apache HTTP Server exposed WebDAV property information. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-58415) Zhen Kong and Charles Vosburgh discovered that Apache HTTP Server did not properly validate FTP server responses. A remote attacker could possibly use this issue to make a forward proxy connect to an arbitrary host. (CVE-2026-

Sources

• Apache Software FoundationVendor advisoryCVE-2026-63045

  Named on the public Apache Software Foundation page.

  httpd.apache.org
• Ubuntu Security NoticesVendor advisoryCVE-2026-63045

  이지웅 discovered that Apache HTTP Server exposed WebDAV property information. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-58415) Zhen Kong and Charles Vosburgh discovered that Apache HTTP Server did not properly validate FTP server res

  ubuntu.com