Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Apache HTTP Server Improper Privilege Management Vulnerability (CVE-2026-24072) - Vulnerability Database

Apache HTTP Server Improper Privilege Management Vulnerability (CVE-2026-24072)

Description

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

References

CVE-2026-24072

Related Vulnerabilities

MySQL CVE-2022-21284 Vulnerability (CVE-2022-21284) Medium
Common tags: Missing Update Known Vulnerabilities
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23192) Medium
Common tags: Missing Update Known Vulnerabilities
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23066) Medium
Common tags: Missing Update Known Vulnerabilities
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23126) Medium
Common tags: Missing Update Known Vulnerabilities
Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-23127) High
Common tags: Missing Update Known Vulnerabilities

Severity

High

Classification

CVE-2026-24072
CWE-269
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update
Known Vulnerabilities