CVE-2026-44186

score

<0.1

cvss

7.3

epss

1.1%

published

2026-06-08

kev added

—

first seen

2026-10-21

Apache HTTP Server 2.4.0 through 2.4.67 contains an infinite loop caused by an unreachable exit condition in the mod_proxy_ftp module, letting attackers with control of backend FTP server cause denial of service, exploit requires attacker-controlled backend FTP server.