CVE-2026-63686

The Apache Software Foundation Apache HTTP Server (versions before 2.4.69 on all platforms) is vulnerable to a NULL pointer dereference in the mod_xml2enc component. An untrusted backend server can trigger a denial of service by providing a proxied response with a charset that partially succeeds ...