CVE-2026-24072 | Apache HTTP Server up to 2.4.66 .htaccess privileges management

May 4, 2026 Yanac

A vulnerability marked as problematic has been reported in Apache HTTP Server up to 2.4.66. Impacted is an unknown function of the component .htaccess Handler. The manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-24072. An attack has to be approached locally. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More