Is CVE-2026-63718 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-63718?

CVE-2026-63718 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-63718

Description

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68.