VDB
RHSA-2026:74858
RHSA-2026:74858
PUBLISHED
CVSS 5.400000095367432 MEDIUM
A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface (CGI) program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file extension recognized by the MIME handler, the server incorrectly treats and executes the target file as a script. This issue could allow an attacker to run unauthorized commands or code within the server context.
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | httpd-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-filesystem-0:2.4.69-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_ldap-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-manual-0:2.4.69-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-devel-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-core-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-core-0:2.4.69-1.hum1@x86_64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-0:2.4.69-1.hum1@x86_64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_lua-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-0:2.4.69-1.hum1@src as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-filesystem-0:2.4.69-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_session-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-tools-0:2.4.69-1.hum1@x86_64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_ldap-0:2.4.69-1.hum1@x86_64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | httpd-tools-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_ssl-0:2.4.69-1.hum1@x86_64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_ssl-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1, 2.4.69-1.hum1, 2.4.69-1.hum1 |
| Red Hat | httpd-manual-0:2.4.69-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_proxy_html-0:2.4.69-1.hum1@aarch64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
| Red Hat | mod_proxy_html-0:2.4.69-1.hum1@x86_64 as a component of Red Hat Hardened Images | 2.4.69-1.hum1 |
…and 3 more
Timeline
- Oct 2, 2026 CVE Published
- Oct 12, 2026 CVE Updated
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:74858 advisory
- https://images.redhat.com/ advisory
- https://access.redhat.com/security/cve/CVE-2026-47360 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://access.redhat.com/security/cve/CVE-2026-42356 advisory
- https://access.redhat.com/security/cve/CVE-2026-48005 advisory
- https://access.redhat.com/security/cve/CVE-2026-73636 advisory
- https://access.redhat.com/security/cve/CVE-2026-58415 advisory
- https://access.redhat.com/security/cve/CVE-2026-56153 advisory
- https://access.redhat.com/security/cve/CVE-2026-46729 advisory
- https://access.redhat.com/security/cve/CVE-2026-63045 advisory
- https://access.redhat.com/security/cve/CVE-2026-63292 advisory
- https://access.redhat.com/security/cve/CVE-2026-42528 advisory
- https://access.redhat.com/security/cve/CVE-2026-63686 advisory
- https://access.redhat.com/security/cve/CVE-2026-73637 advisory
- https://access.redhat.com/security/cve/CVE-2026-93546 advisory
- https://access.redhat.com/security/cve/CVE-2026-56449 advisory
- https://access.redhat.com/security/cve/CVE-2026-79768 advisory
- https://access.redhat.com/security/cve/CVE-2026-63718 advisory
- https://access.redhat.com/security/cve/CVE-2026-59797 advisory
…and 80 more