Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-63718

Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Description

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache HTTP Server

Default version status: unaffected

  • 2.4.30 to ≤ 2.4.68affected

References