8.8 HighCWE-269
CVE-2026-24072
Apache Software Foundation Apache HTTP Server vulnerability
Apache Software FoundationApache HTTP Server
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 20 Oct
0.7%probability of exploitation in the next 30 days
Higher than 50% of scored CVEs
SeverityCVSS
8.8High
Description NVD
An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.
Coverage 1 article · 1 outlet
- Apache patches HTTP Server and MINA flaws, warns of RCE riskSecurityWeek · first in our coverage · mentions it in passing