Servers and applications
CVE-2026-44119
Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
- Severity
- Medium 5.5
- Published
- 8 Jun 2026
- Last changed
- 23 Jul 2026
- Added to UpHeron
- 17 Oct 2026
- Fixed in
- 2.4.68
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Apache HTTP ServerServers and applications · cpe:a:apache:http_server |
|