> CVE-2026-24072

« BACK_TO_HOME
PUBLISHED
2026-05-04 13:16
MODIFIED
2026-05-04 13:16
EPSS (Prob. Exploit)
0.65%
Top 48.4%
DATA SOURCES:
NVD 🔗 2026-05-04 RED HAT 🔗 2026-05-10 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-02 MSRC 🔗 2026-11-02

> DESCRIPTION

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-269

> CWE DETAILED DESCRIPTIONS

CWE-269: Improper Privilege Management - The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: httpd security, bug fix, and enhancement update
An update for httpd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CV...
Red Hat Security Advisory: Insights proxy Container Image
Initial GA Release of Red Hat Insights proxy

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr

AFFECTED PACKAGES:
Unknown / Unknown
2 versions affected
ALIASES:
BIT-apache-2026-24072

> HISTORIQUE DES MODIFICATIONS

Première apparition
04/05/2026 13:16
Source: NVD
📊 ENRICHISSEMENT 01/06/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-269: Improper Privilege Management - The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
📊 ENRICHISSEMENT 10/05/2026 05:02
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 10/05/2026 05:02
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 5 months ago

> REFERENCES

https://httpd.apache.org/security/vulnerabilities_24.html
« BACK_TO_HOME