Apache HTTP Server Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Apache HTTP Server Project products: 2 record(s), with severity, exploitation and fixes.

Apache Lounge Windows 2

Exploited only (KEV) →

CVE-2026-89282 Critical · 9.1 CWE-732 Sep 22, 2026

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.

CVE-2026-89281 High · 8.4 CWE-732 Sep 22, 2026

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.