Vulnerability intelligence

CVE-2026-59797

Apache Software Foundation Apache HTTP Server CWE-269

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-02

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

No linked coverage yet. CyberSIXT tracks this CVE and coverage will appear here.

Related CVEs — Apache Software Foundation

CVE-2026-63292 CVE-2026-57941 CVE-2026-56154 CVE-2026-59685 CVE-2026-42356 CVE-2026-42528 CVE-2026-93546 CVE-2026-94052