https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:05:13.368558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380883 EUVD-2026-380883 2026-10-02T11:05:13.370861+00:00 EUVD-2026-380883 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63045 fkie_cve-2026-63045 2026-10-02T11:05:13.370893+00:00

Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafted PASV response.

Users are recommended to upgrade to version 2.4.69, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-6wv6-863r-87j4 GHSA-6wv6-863r-87j4 2026-10-02T11:05:13.370925+00:00

Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafted PASV response.

Users are recommended to upgrade to version 2.4.69, which fixes this issue.