Apache HTTP Server Project vulnerabilities
We track 2 vulnerabilities in Apache HTTP Server Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2026.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Apache HTTP Server Project vulnerabilities
- 9.1 Critical severity
Apache Lounge Windows: Incorrect Permission Assignment for Critical Resource
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.
- 8.4 High severity
Apache Lounge Windows: Incorrect Permission Assignment for Critical Resource
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.