BIT-apache-2026-44119

vendorUSosv

Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules

view advisory published 2026-06-10Licence: per source

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-44119US	—	0.18% (7th)	—	2026-06-08
Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue…

references

External citations — patches, advisories, analysis.

http://www.openwall.com/lists/oss-security/2026/06/08/11ADVISORY
https://httpd.apache.org/security/vulnerabilities_24.htmlADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2026-44119WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan