Apache HTTP Server Project vulnerabilities

2 vulnerabilities

Known vulnerabilities in Apache HTTP Server Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
9.1CVE-2026-89282apache http server projectapache lounge windows
EPSS score
0.27%
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.8.4CVE-2026-89281apache http server projectapache lounge windows
EPSS score
0.13%
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.