CVE-2026-59797

Опубликовано: 01 окт. 2026

Источник: debian

EPSS Низкий

Описание

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
apache2	fixed	2.4.69-1		package

Примечания

https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59797
Fixed by: https://github.com/apache/httpd/commit/1ee1c1fef2511454461b6770b204c4934a6495d8

EPSS

Процентиль: 43%

0.0052

Низкий

Связанные уязвимости

CVE-2026-59797

CVSS3: 9.8

ubuntu

21 день назад

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-59797

CVSS3: 5.5

redhat

22 дня назад

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-59797

CVSS3: 9.8

nvd

21 день назад

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-59797

CVSS3: 9.8

msrc

14 дней назад

Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function

GHSA-qp6v-989p-mw9v

CVSS3: 9.8

github

21 день назад

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

EPSS

Процентиль: 43%

0.0052

Низкий