onyx

onyx --cves cve-2026-93546

CVE-2026-93546

HIGHApache HTTP Server
score
0.6
cvss
8.8
epss
0.4%
published
2026-10-01
kev added
—
first seen

Apache HTTP Server <= 2.4.68 contains an integer overflow in mod_dav_fs caused by PROPPATCH requests with many XML namespaces, letting authenticated WebDAV clients with write access crash worker processes and corrupt property databases.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-10-01 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score 0.60.6epss2026-10-02: epss 0.3%2026-10-03: epss 0.3%2026-10-04: epss 0.3%2026-10-05: epss 0.3%2026-10-06: epss 0.4%2026-10-07: epss 0.4%2026-10-08: epss 0.4%2026-10-09: epss 0.4%2026-10-10: epss 0.4%2026-10-11: epss 0.4%2026-10-12: epss 0.4%2026-10-13: epss 0.4%2026-10-14: epss 0.4%2026-10-15: epss 0.4%2026-10-16: epss 0.4%2026-10-18: epss 0.4%2026-10-19: epss 0.4%2026-10-20: epss 0.4%2026-10-21: epss 0.4%0.4%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-190

References 2