Read the docs

Apache HTTP Server Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Apache HTTP Server Project records in CISA KEV

No Apache HTTP Server Project vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-60449 CVE-2026-89282 · GHSA-w7qw-gwf7-rvpq

Incorrect permission assignment in Apache Lounge Windows

Priority MEDIUM 48

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authe…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00479 Published 2026-09-22 Fixed in Apache 2.4.68-260920 Win64 CWE-732
TI-2026-60448 CVE-2026-89281 · GHSA-c78c-jvr8-f6vh

Incorrect permission assignment in Apache Lounge Windows

Priority LOW 38

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00184 Published 2026-09-22 Fixed in Apache 2.4.68-260920 Win64 CWE-732
Open these records in search →