HIGH 7.5 NVD

CVE-2026-63718

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68.

References

https://httpd.apache.org/security/vulnerabilities_24.html
https://www.openwall.com/lists/oss-security/2026/10/01/26

Published: 2026-10-01 · Source: NVD · Feed updated: 2026-10-01

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-10-01 via NVD.

vulnfeed aggregates 9446 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.