Search vulnerabilities

Results 2

Export CSV
CVE-2026-89282

CVE-2026-89282

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
CVE-2026-89281

CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed