CVE-2026-59685

The Apache HTTP Server is vulnerable to an Out-of-Bounds Write (CWE-787) on Windows systems. The flaw resides in the ap_directory_walk() function during Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM , specifically when processing paths with 8.3 names that may grow during expansion. This issue a...

CVE-2026-59685 Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...