Red Hat Security Advisory

RHSA-2026:5156

Red Hat Hardened Images RPM Release

Released 2026-03-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images httpd-2.4.66-6.hum1@aarch64, httpd-2.4.66-6.hum1@src, httpd-2.4.66-6.hum1@x86_64 +10

Fixes 4 records

TI-2025-35937 CVE-2025-58098 · GHSA-4m29-g52g-c6qc

Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

MEDIUM 41

Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01526 Published 2025-12-05 Fixed in 2.4.66 CWE-201

TI-2025-37227 CVE-2025-59775 · GHSA-7w72-74p3-5cfq

Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

LOW 35

Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious reque…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0088 Published 2025-12-05 Fixed CWE-918

TI-2025-40235 CVE-2025-65082 · GHSA-768g-4qpg-32w7

Apache HTTP Server: CGI environment variable override

LOW 30

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00865 Published 2025-12-05 Partial fix CWE-150

TI-2025-40704 CVE-2025-66200 · GHSA-3j3g-3pw9-9vcc

Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo

LOW 26

mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00697 Published 2025-12-05 Partial fix CWE-288