CVE-2026-59685
Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
- Published Oct 1, 2026
- CVSS 7.5 high
- 0.3% chance of exploitation in the next 30 days (EPSS)