Search: CVE-2026-63045

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-63045Apache HTTP Server · Improper Access Control High7.5EPSS 0.4%2026-10-01CVE Database V5CVE-2026-63045 Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafted PASV response. Users are recommended to upgrade to version 2.4.69, which fixes this issue. EPSS 0.4%Vulnerability Apache Software Foundation CWE-284	CVE Database V5	2026-10-01

Page 1 of 1 · 1 duplicate CVE record merged