VDB
CVE-2026-24072
CVE-2026-24072
PUBLISHED
CVSS 8.800000190734863 HIGH
An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.
EPSS 0.02% · 5.2th percentile
Risk Scores
CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.02%
5.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | apache | 0 |
| apache | http_server |
Timeline
- May 4, 2026 CVE Published
- May 4, 2026 PoC Published
- May 4, 2026 PoC Published
- May 4, 2026 PoC Published
- May 13, 2026 Security Advisory
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score