PT-2026-103933

CVE-2026-59797

تاريخ النشر

2026-10-01

تاريخ التحديث

2026-11-04

الوصف من

CVSS 3.1

9.8

حرجة

المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.68

Description An improper privilege management issue exists in the mod ssl module. The flaw occurs when using SSLRequire in conjunction with file-related expressions via ap expr file functions, which can lead to improper privilege escalation without requiring authentication.

Recommendations Update Apache HTTP Server to a version later than 2.4.68.

قابلية الاستغلال

استغلال

إصلاح

التأثيرات

الباحثون

Charles Vosburgh

Juthawong Naisanguansee