Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Apache HTTP Server Project Clear all filters
TI-2026-60448 CVE-2026-89281 · GHSA-c78c-jvr8-f6vh

Incorrect permission assignment in Apache Lounge Windows

Priority LOW 38

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00184 Published 2026-09-22 Fixed in Apache 2.4.68-260920 Win64 CWE-732
TI-2026-60449 CVE-2026-89282 · GHSA-w7qw-gwf7-rvpq

Incorrect permission assignment in Apache Lounge Windows

Priority MEDIUM 48

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authe…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00479 Published 2026-09-22 Fixed in Apache 2.4.68-260920 Win64 CWE-732