Description

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

Remediation

References

CVE-2026-24072

Related Vulnerabilities

WordPress Plugin Social Slider Widget Cross-Site Scripting (1.8.4)

WordPress Plugin Affiliates Manager SQL Injection (2.8.6)

WordPress Plugin Strong Testimonials Cross-Site Scripting (2.40.0)

MySQL CVE-2014-6559 Vulnerability (CVE-2014-6559)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27149)

Severity

High

Classification

CVE-2026-24072 CWE-269 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities