Apache HTTP Server Project Apache Lounge Windows vulnerabilities

2 vulnerabilities

Known vulnerabilities in Apache HTTP Server Project Apache Lounge Windows, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.1CVE-2026-89282apache http server projectapache lounge windows
EPSS score
0.27%
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.8.4CVE-2026-89281apache http server projectapache lounge windows
EPSS score
0.13%
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.