Skip to content
OpenAdvisories
High · 8.4 CVE-2026-89281 EUVD-2026-84681GHSA-c78c-jvr8-f6vh

CVE-2026-89281

Published Sep 22, 2026 · Updated Sep 23, 2026 · Assigned by certcc

Vendor: Apache HTTP Server Project Product: Apache Lounge Windows Platform: Windows

Description

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.

Affected products

VendorProductAffectedFixed
Apache HTTP Server Project Apache Lounge Windows < Apache 2.4.68-260920 Win64 Apache 2.4.68-260920 Win64

References