Apache HTTP Server Project Apache Lounge Windows vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache HTTP Server Project Apache Lounge Windows: 2 record(s), with affected versions and fixes.

CVE-2026-89282 Critical · 9.1 CWE-732 Sep 22, 2026

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.

CVE-2026-89281 High · 8.4 CWE-732 Sep 22, 2026

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.